CVE-2024-38410

Published Nov 4, 2024

Last updated 10 days ago

Overview

Description
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Source
product-security@qualcomm.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

nvd@nist.gov
CWE-787
product-security@qualcomm.com
CWE-121

Social media

Hype score
Not currently trending

Configurations