CVE-2024-21479

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS during music playback of ALAC content.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6310; QCA6320; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6584AU; QCA6696; QCA6698AQ
qualcommar8035_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca6310_firmware<= *
qualcommqca6320_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqca8081_firmware<= *
qualcommqca8337_firmware<= *
qualcommqca9367_firmware<= *
qualcommqca9377_firmware<= *
qualcommqcc710_firmware<= *
qualcommqcn6224_firmware<= *
qualcommqcn6274_firmware<= *
qualcommqcn9074_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs4490_firmware<= *
qualcommqcs610_firmware<= *
qualcommqfw7114_firmware<= *
qualcommqfw7124_firmware<= *
qualcommqualcomm_video_collaboration_vc1_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa7255p_firmware<= *
qualcommsa7775p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsa8255p_firmware<= *
qualcommsa8295p_firmware<= *
qualcommsa8530p_firmware<= *
qualcommsa8540p_firmware<= *
qualcommsa8620p_firmware<= *

References

Timeline

Published
Aug 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-21488.8A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of CVE-2024-214809.8Memory corruption while playing audio file having large-sized input buffer.CVE-2024-214818.4Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.CVE-2024-214827.8Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs imagCVE-2024-214834.6A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactureCVE-2024-214845.9Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. CVE-2024-214855.4Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the packaCVE-2024-214889.8Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function witCVE-2024-214898.2Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the CVE-2024-21497.2A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of tCVE-2024-214907.5This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split thCVE-2024-214916.5Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures o
CVE-2024-21479: High severity, CVSS 7.5 | Vulnix