CVE-2024-21473

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while redirecting log file to any file location with any file name.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; AR9380; CSR8811; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ4018; IPQ4019; IPQ4028; IPQ4029; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312
qualcommar8035_firmware-
qualcommar9380_firmware-
qualcommcsr8811_firmware-
qualcommfastconnect_6900_firmware-
qualcommfastconnect_7800_firmware-
qualcommimmersive_home_214_platform_firmware-
qualcommimmersive_home_216_platform_firmware-
qualcommimmersive_home_316_platform_firmware-
qualcommimmersive_home_318_platform_firmware-
qualcommimmersive_home_3210_platform_firmware-
qualcommipq4018_firmware-
qualcommipq6028_firmware-
qualcommipq6018_firmware-
qualcommipq6010_firmware-
qualcommipq6000_firmware-
qualcommipq5332_firmware-
qualcommipq5312_firmware-
qualcommipq5302_firmware-
qualcommipq5028_firmware-
qualcommipq5010_firmware-
qualcommipq4029_firmware-
qualcommipq4028_firmware-
qualcommipq4019_firmware-
qualcommipq8064_firmware-
qualcommipq8065_firmware-
qualcommipq8068_firmware-
qualcommipq8070_firmware-
qualcommipq8070a_firmware-
qualcommipq8071_firmware-
qualcommipq8071a_firmware-
qualcommipq8072_firmware-
qualcommipq8072a_firmware-
qualcommipq8074_firmware-
qualcommipq8074a_firmware-
qualcommipq8076_firmware-
qualcommipq8076a_firmware-
qualcommipq8078_firmware-
qualcommipq8078a_firmware-
qualcommipq8173_firmware-
qualcommipq8174_firmware-
qualcommipq9008_firmware-
qualcommipq9554_firmware-
qualcommipq9570_firmware-
qualcommipq9574_firmware-
qualcommpmp8074_firmware-
qualcommqca0000_firmware-
qualcommqca4024_firmware-
qualcommqca6428_firmware-
qualcommqca6438_firmware-

References

Timeline

Published
Apr 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214747.8Memory corruption when size of buffer from previous call is used without validation or re-initialization.CVE-2024-214757.8Memory corruption when the payload received from firmware is not as per the expected protocol size.CVE-2024-214767.8Memory corruption when the channel ID passed by user is not validated and further used.CVE-2024-214777.5Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.CVE-2024-214785.5transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.CVE-2024-214797.5Transient DOS during music playback of ALAC content.CVE-2024-21488.8A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of CVE-2024-214809.8Memory corruption while playing audio file having large-sized input buffer.CVE-2024-214818.4Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.CVE-2024-214827.8Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs imagCVE-2024-214834.6A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactureCVE-2024-214845.9Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process.
CVE-2024-21473: Critical severity, CVSS 9.8 | Vulnix