CVE-2024-21474
HIGHDescription
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
Is your site exposed to CVE-2024-21474?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | ar8035_firmware |
| qualcomm | ar8035 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | qam8295p_firmware |
| qualcomm | qam8295p |
| qualcomm | qca6574au_firmware |
| qualcomm | qca6574au |
| qualcomm | qca6595_firmware |
| qualcomm | qca6595 |
| qualcomm | qca6696_firmware |
| qualcomm | qca6696 |
| qualcomm | qca6698aq_firmware |
| qualcomm | qca6698aq |
| qualcomm | qca8081_firmware |
| qualcomm | qca8081 |
| qualcomm | qca8337_firmware |
| qualcomm | qca8337 |
| qualcomm | sa8295p_firmware |
| qualcomm | sa8295p |
| qualcomm | sa8530p_firmware |
| qualcomm | sa8530p |
| qualcomm | sa8540p_firmware |
| qualcomm | sa8540p |
| qualcomm | sa9000p_firmware |
| qualcomm | sa9000p |
| qualcomm | sc8380xp_firmware |
| qualcomm | sc8380xp |
| qualcomm | sc8280xp-abbb_firmware |
| qualcomm | sc8280xp-abbb |
| qualcomm | snapdragon_x65_5g_modem-rf_firmware |
| qualcomm | snapdragon_x65_5g_modem-rf |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
References
Frequently Asked Questions
What is CVE-2024-21474? +
How severe is CVE-2024-21474? +
What products are affected by CVE-2024-21474? +
How do I check if I'm vulnerable to CVE-2024-21474? +
Related Vulnerabilities
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to …
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. …
editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have …
Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue
A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may …
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute …