Name: Vulnix
Price: 99 USD

Description

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA1062; QCA1064; QCA2062; QCA2064; QCA2065; QCA2066; QCA6164; QCA6174; QCA6174A; QCA6391; QCA6420; QCA6430; QCA6595AU; QCA9377
qualcomm	aqt1000_firmware	<= *
qualcomm	fastconnect_6200_firmware	<= *
qualcomm	fastconnect_6700_firmware	<= *
qualcomm	fastconnect_6800_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	qca1062_firmware	<= *
qualcomm	qca1064_firmware	<= *
qualcomm	qca2062_firmware	<= *
qualcomm	qca2064_firmware	<= *
qualcomm	qca2065_firmware	<= *
qualcomm	qca2066_firmware	<= *
qualcomm	qca6164_firmware	<= *
qualcomm	qca6174_firmware	<= *
qualcomm	qca6174a_firmware	<= *
qualcomm	qca6391_firmware	<= *
qualcomm	qca6420_firmware	<= *
qualcomm	qca6430_firmware	<= *
qualcomm	qca6595au_firmware	<= *
qualcomm	qca9377_firmware	<= *
qualcomm	qcc2073_firmware	<= *
qualcomm	qcc2076_firmware	<= *
qualcomm	qcm5430_firmware	<= *
qualcomm	qcm6490_firmware	<= *
qualcomm	qcn7605_firmware	<= *
qualcomm	qcn7606_firmware	<= *
qualcomm	qcs5430_firmware	<= *
qualcomm	qcs6490_firmware	<= *
qualcomm	qualcomm_video_collaboration_vc3_platform_firmware	<= *
qualcomm	sc8380xp_firmware	<= *
qualcomm	sdm429w_firmware	<= *
qualcomm	snapdragon_429_mobile_platform_firmware	<= *
qualcomm	wcd9340_firmware	<= *
qualcomm	wcd9341_firmware	<= *
qualcomm	wcd9370_firmware	<= *
qualcomm	wcd9375_firmware	<= *
qualcomm	wcd9380_firmware	<= *
qualcomm	wcd9385_firmware	<= *
qualcomm	wcn3620_firmware	<= *
qualcomm	wcn3660b_firmware	<= *
qualcomm	wsa8810_firmware	<= *
qualcomm	wsa8815_firmware	<= *
qualcomm	wsa8830_firmware	<= *
qualcomm	wsa8835_firmware	<= *
qualcomm	wsa8840_firmware	<= *
qualcomm	wsa8845_firmware	<= *
qualcomm	wsa8845h_firmware	<= *

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.htmlVendor Advisory

Timeline

Published: Dec 2, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

CVE-2024-43050