First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-23374

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6900; FastConnect 7800; QCA6174A; QCA6574AU; QCA6584AU; QCA6696; QCA6698AQ; QCA9367; QCA9377; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon W5+ Gen 1 Wearable Platform; SW5100
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	qca6174a_firmware	<= *
qualcomm	qca6574au_firmware	<= *
qualcomm	qca6584au_firmware	<= *
qualcomm	qca6696_firmware	<= *
qualcomm	qca6698aq_firmware	<= *
qualcomm	qca9367_firmware	<= *
qualcomm	qca9377_firmware	<= *
qualcomm	sa6145p_firmware	<= *
qualcomm	sa6150p_firmware	<= *
qualcomm	sa6155p_firmware	<= *
qualcomm	sa8145p_firmware	<= *
qualcomm	sa8150p_firmware	<= *
qualcomm	sa8155p_firmware	<= *
qualcomm	sa8195p_firmware	<= *
qualcomm	snapdragon_8_gen_1_mobile_platform_firmware	<= *
qualcomm	snapdragon_auto_5g_modem-rf_gen_2_firmware	<= *
qualcomm	sw5100_firmware	<= *
qualcomm	sw5100p_firmware	<= *
qualcomm	wcd9380_firmware	<= *
qualcomm	wcn3980_firmware	<= *
qualcomm	wcn3988_firmware	<= *
qualcomm	wsa8830_firmware	<= *
qualcomm	wsa8835_firmware	<= *

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.htmlVendor Advisory

Timeline

Published: Oct 7, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-233756.7Memory corruption during the network scan request.CVE-2024-233766.7Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.CVE-2024-233776.7Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system pr CVE-2024-233786.7Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.CVE-2024-233796.7Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.CVE-2024-23387.5PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic m CVE-2024-233807.8Memory corruption while handling user packets during VBO bind operation.CVE-2024-233817.8Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.CVE-2024-233827.8Memory corruption while processing graphics kernel driver request to create DMA fence.CVE-2024-233837.8Memory corruption when kernel driver attempts to trigger hardware fences.CVE-2024-233848.4Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.CVE-2024-233856.5Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

CVE-2024-23374: Medium severity, CVSS 6.7 | Vulnix