CVE-2024-21478

MEDIUM
Published Jun 3, 2024 Modified Jan 27, 2025 CWE-704 CWE-476

Description

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

Is your site exposed to CVE-2024-21478?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.2
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-704 CWE-704
CWE-476 CWE-476

Affected Products

Vendor Product
qualcomm qam8255p_firmware
qualcomm qam8255p
qualcomm qam8650p_firmware
qualcomm qam8650p
qualcomm qam8775p_firmware
qualcomm qam8775p
qualcomm qamsrv1h_firmware
qualcomm qamsrv1h
qualcomm qamsrv1m_firmware
qualcomm qamsrv1m
qualcomm sa8255p_firmware
qualcomm sa8255p
qualcomm sa8650p_firmware
qualcomm sa8650p
qualcomm sa8770p_firmware
qualcomm sa8770p
qualcomm sa8775p_firmware
qualcomm sa8775p
qualcomm sa9000p_firmware
qualcomm sa9000p
qualcomm srv1h_firmware
qualcomm srv1h
qualcomm srv1m_firmware
qualcomm srv1m

References

Frequently Asked Questions

What is CVE-2024-21478? +
transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA. It has a CVSS v3.1 base score of 6.2 (MEDIUM).
How severe is CVE-2024-21478? +
CVE-2024-21478 has a CVSS v3.1 score of 6.2 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-21478? +
CVE-2024-21478 affects products from qualcomm, specifically: qam8255p, qam8255p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, sa8255p, sa8255p_firmware, sa8650p, sa8650p_firmware, sa8770p, sa8770p_firmware, sa8775p, sa8775p_firmware, sa9000p, sa9000p_firmware, srv1h, srv1h_firmware, srv1m, srv1m_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-21478? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-54429

Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. There are various account address types in …
CVE-2010-20115

Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a …
CVE-2025-41646 9.8

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This …
CVE-2024-5436 9.8

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We …
CVE-2025-41648 9.8

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to …
CVE-2025-62494 8.8

A type confusion vulnerability exists in the handling of the string addition (+) operation within the QuickJS engine. * The …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-21478 — free, no signup required.