CVE-2024-21476

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption when the channel ID passed by user is not validated and further used.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; AR8035; FastConnect 6200; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA1062; QCA1064; QCA6391; QCA6420; QCA6421; QCA6426; QCA6430; QCA6431; QCA6436; QCA8337; QSM8250; SC8180X+SDX55; SC8380XP; SD865 5G
qualcommaqt1000_firmware-
qualcommar8035_firmware-
qualcommfastconnect_6200_firmware-
qualcommfastconnect_6800_firmware-
qualcommfastconnect_6900_firmware-
qualcommfastconnect_7800_firmware-
qualcommqca1062_firmware-
qualcommqca1064_firmware-
qualcommqca6391_firmware-
qualcommqca6420_firmware-
qualcommqca6421_firmware-
qualcommqca6426_firmware-
qualcommqca6430_firmware-
qualcommqca6431_firmware-
qualcommqca6436_firmware-
qualcommqca8337_firmware-
qualcommqsm8250_firmware-
qualcommsc8180x_firmware-
qualcommsdx55_firmware-
qualcommsc8380xp_firmware-
qualcommsd865_5g_firmware-
qualcommsnapdragon_865_5g_mobile_platform_firmware-
qualcommsnapdragon_870_5g_mobile_platform_firmware-
qualcommsnapdragon_888_5g_mobile_platform_firmware-
qualcommsnapdragon_8cx_compute_platform_firmware-
qualcommsnapdragon_x55_5g_modem-rf_system_firmware-
qualcommsnapdragon_xr2_5g_platform_firmware-
qualcommsxr2130_firmware-
qualcommwcd9340_firmware-
qualcommwcd9341_firmware-
qualcommwcd9380_firmware-
qualcommwcd9385_firmware-
qualcommwsa8810_firmware-
qualcommwsa8815_firmware-
qualcommwsa8830_firmware-
qualcommwsa8835_firmware-
qualcommwsa8840_firmware-
qualcommwsa8845_firmware-
qualcommwsa8845h_firmware-

References

Timeline

Published
May 6, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214777.5Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.CVE-2024-214785.5transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.CVE-2024-214797.5Transient DOS during music playback of ALAC content.CVE-2024-21488.8A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of CVE-2024-214809.8Memory corruption while playing audio file having large-sized input buffer.CVE-2024-214818.4Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.CVE-2024-214827.8Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs imagCVE-2024-214834.6A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactureCVE-2024-214845.9Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. CVE-2024-214855.4Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the packaCVE-2024-214889.8Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function witCVE-2024-214898.2Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the
CVE-2024-21476: High severity, CVSS 7.8 | Vulnix