High severity · published Nov 4, 2024
CVE-2024-38423
Memory corruption while processing GPU page table switch
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Memory corruption while processing GPU page table switch.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S7
Snapdragon 768g 5g Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 820 Automotive Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 835 Mobile PC Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 845 Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 855 Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 855+/860 Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 865 5g Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 865+ 5g Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 870 5g Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 888 5g Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 888+ 5g Mobile Platform Firmware · Qualcomm
All versions, or not specified · source: NVD
SA
Snapdragon Auto 4g Modem Firmware · Qualcomm
All versions, or not specified · source: NVD
Affected product
S7
Snapdragon 768g 5g Mobile Platform Firmware
Qualcomm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-38423
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-38423
Patch
https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
More from Snapdragon 768g 5g Mobile Platform Firmware
7.8
CVE-2023-33092
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size
7.5
CVE-2023-33057
Transient DOS in Multi-Mode Call Processor while processing UE policy container
7.5
CVE-2023-33049
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage
7.0
CVE-2023-33110
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race…
6.7
CVE-2024-33053
Memory corruption when multiple threads try to unregister the CVP buffer at the same time