Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Qualcomm firmware may cause GPU memory corruption

CVE-2024-23381 · published 2 years ago
Summary

The listed Qualcomm firmware versions can mishandle graphics memory, potentially corrupting data in video buffers. This can lead to system instability or crashes, especially when graphics operations are intensive. Update the firmware to the latest version provided by Qualcomm to resolve the issue.

What to do
  • Update google :linux_kernel:qualcomm to version SoCVersion:2024-08-05.
  • Update google platform/vendor/qcom/opensource/graphics-kernel to version SoCVersion:2024-08-05.
Affected software
Ecosystem VendorProductAffected versions
– qualcomm wsa8845h_firmware All versions
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8845_firmware All versions
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8840_firmware All versions
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8835_firmware All versions
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8830_firmware All versions
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8815_firmware All versions
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
– qualcomm wsa8810_firmware All versions
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3988_firmware All versions
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3980_firmware All versions
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
– qualcomm wcn3950_firmware All versions
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9395_firmware All versions
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9390_firmware All versions
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9385_firmware All versions
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9380_firmware All versions
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9375_firmware All versions
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
– qualcomm wcd9370_firmware All versions
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
– qualcomm sw5100p_firmware All versions
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
– qualcomm sw5100_firmware All versions
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
– qualcomm srv1m_firmware All versions
cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*
– qualcomm srv1l_firmware All versions
cpe:2.3:o:qualcomm:srv1l_firmware:-:*:*:*:*:*:*:*
– qualcomm srv1h_firmware All versions
cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_8_gen_3_mobile_platform_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_8_gen_1_mobile_platform_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_695_5g_mobile_platform_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_480_5g_mobile_platform_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm snapdragon_4_gen_1_mobile_platform_firmware All versions
cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm sa9000p_firmware All versions
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8775p_firmware All versions
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8770p_firmware All versions
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8650p_firmware All versions
cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8620p_firmware All versions
cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8295p_firmware All versions
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8255p_firmware All versions
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8195p_firmware All versions
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa8155p_firmware All versions
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa7775p_firmware All versions
cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa7255p_firmware All versions
cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*
– qualcomm sa6155p_firmware All versions
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
– qualcomm video_collaboration_vc5_platform_firmware All versions
cpe:2.3:o:qualcomm:video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm video_collaboration_vc3_platform_firmware All versions
cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm video_collaboration_vc1_platform_firmware All versions
cpe:2.3:o:qualcomm:video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs8250_firmware All versions
cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs7230_firmware All versions
cpe:2.3:o:qualcomm:qcs7230_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs6490_firmware All versions
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs6125_firmware All versions
cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs5430_firmware All versions
cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*
– qualcomm qcm6490_firmware All versions
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
– qualcomm qcm6125_firmware All versions
cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*
Showing 50 of 74. Show the rest
Ecosystem VendorProductAffected versions
– qualcomm qcm5430_firmware All versions
cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6797aq_firmware All versions
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6698aq_firmware All versions
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6696_firmware All versions
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6678aq_firmware All versions
cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6595au_firmware All versions
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6595_firmware All versions
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574au_firmware All versions
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574a_firmware All versions
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574_firmware All versions
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6391_firmware All versions
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
– qualcomm qamsrv1m_firmware All versions
cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*
– qualcomm qamsrv1h_firmware All versions
cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*
– qualcomm qam8775p_firmware All versions
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
– qualcomm qam8650p_firmware All versions
cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*
– qualcomm qam8620p_firmware All versions
cpe:2.3:o:qualcomm:qam8620p_firmware:-:*:*:*:*:*:*:*
– qualcomm qam8295p_firmware All versions
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
– qualcomm qam8255p_firmware All versions
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
– qualcomm fastconnect_7800_firmware All versions
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
– qualcomm fastconnect_6900_firmware All versions
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
– qualcomm fastconnect_6700_firmware All versions
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
– qualcomm fastconnect_6200_firmware All versions
cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*
Android google :linux_kernel:qualcomm >= SoCVersion:0, < SoCVersion:2024-08-05
Fix: upgrade to SoCVersion:2024-08-05
Android google platform/vendor/qcom/opensource/graphics-kernel >= SoCVersion:0, < SoCVersion:2024-08-05
Fix: upgrade to SoCVersion:2024-08-05
Original advisory text
ASB-A-339043781
Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published1 Aug 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-23381 · NVD
ASB-A-339043781 · OSV
Track software like this
Free during beta