CVE-2024-38407

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6420; QCA6430; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8180X+SDX55; SC8380XP; SDM429W; SM6250; Snapdragon 429 Mobile Platform; Snapdragon 7c Compute Platform (SC7180-AC)
qualcommaqt1000_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6430_firmware<= *
qualcommqcm5430_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcs5430_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommsc8380xp_firmware<= *
qualcommsdm429w_firmware<= *
qualcommsm6250_firmware<= *
qualcommsnapdragon_429_mobile_platform_firmware<= *
qualcommwcd9340_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9375_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcd9385_firmware<= *
qualcommwcn3620_firmware<= *
qualcommwcn3660b_firmware<= *
qualcommwsa8810_firmware<= *
qualcommwsa8815_firmware<= *
qualcommwsa8830_firmware<= *
qualcommwsa8835_firmware<= *
qualcommwsa8840_firmware<= *
qualcommwsa8845_firmware<= *
qualcommwsa8845h_firmware<= *

References

Timeline

Published
Nov 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-38407: High severity, CVSS 7.0 | Vulnix