CVE-2024-21464

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing IPA statistics, when there are no active clients registered.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6700; FastConnect 6900; FastConnect 7800; QCM4490; QCS4490; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; TalynPlus; WCD9370; WCD9390; WCD9395; WCN3950; WCN6740; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845

References

Timeline

Published
Jan 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214657.8Memory corruption while processing key blob passed by the user.CVE-2024-214667.5Information disclosure while parsing sub-IE length during new IE generation.CVE-2024-214677.5Information disclosure while handling beacon probe frame during scan entry generation in client side.CVE-2024-214687.8Memory corruption when there is failed unmap operation in GPU.CVE-2024-214697.8Memory corruption when an invoke call and a TEE call are bound for the same trusted application.CVE-2024-21479.8A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is somCVE-2024-214707.8Memory corruption while allocating memory for graphics.CVE-2024-214717.8Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.CVE-2024-214727.8Memory corruption in Kernel while handling GPU operations.CVE-2024-214739.8Memory corruption while redirecting log file to any file location with any file name.CVE-2024-214747.8Memory corruption when size of buffer from previous call is used without validation or re-initialization.CVE-2024-214757.8Memory corruption when the payload received from firmware is not as per the expected protocol size.
CVE-2024-21464: High severity, CVSS 7.8 | Vulnix