CVE-2024-23383

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption when kernel driver attempts to trigger hardware fences.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6391; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6678AQ; QCA6696; QCA6698AQ
qualcommqcs6125_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqcs7230_firmware<= *
qualcommqcs8250_firmware<= *
qualcommqualcomm_video_collaboration_vc1_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc5_platform_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa7255p_firmware<= *
qualcommsa7775p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsa8255p_firmware<= *
qualcommsa8295p_firmware<= *
qualcommsa8620p_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8620p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6678aq_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqca6797aq_firmware<= *
qualcommqcm5430_firmware<= *
qualcommqcm6125_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcs5430_firmware<= *
qualcommsa8650p_firmware<= *
qualcommsa8770p_firmware<= *
qualcommsa8775p_firmware<= *
qualcommsa9000p_firmware<= *
qualcommsnapdragon_4_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_480_5g_mobile_platform_firmware<= *
qualcommsnapdragon_695_5g_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_3_mobile_platform_firmware<= *
qualcommsrv1h_firmware<= *

References

Timeline

Published
Aug 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-233848.4Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.CVE-2024-233856.5Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.CVE-2024-233866.7memory corruption when WiFi display APIs are invoked with large random inputs.CVE-2024-233874.8FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attackeCVE-2024-233886.1Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker CVE-2024-23398.8PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser. A user can define a maskinCVE-2024-23405.3The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the '/wp-contCVE-2024-23416.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the kCVE-2024-23428.8The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the cCVE-2024-23436.4The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up CVE-2024-234397.1Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0xCVE-2024-23447.2The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and including, 7.11.6 due to i
CVE-2024-23383: High severity, CVSS 7.8 | Vulnix