CVE-2024-38419

HIGH
Published Nov 4, 2024 Modified Nov 7, 2024 CWE-416

Description

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Is your site exposed to CVE-2024-38419?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-416 Use After Free

Affected Products

Vendor Product
qualcomm wsa8845h_firmware
qualcomm wsa8845h
qualcomm wsa8845_firmware
qualcomm wsa8845
qualcomm wsa8840_firmware
qualcomm wsa8840
qualcomm wsa8835_firmware
qualcomm wsa8835
qualcomm wsa8832_firmware
qualcomm wsa8832
qualcomm wsa8830_firmware
qualcomm wsa8830
qualcomm wsa8815_firmware
qualcomm wsa8815
qualcomm wsa8810_firmware
qualcomm wsa8810
qualcomm wcn6755_firmware
qualcomm wcn6755
qualcomm wcn3990_firmware
qualcomm wcn3990
qualcomm wcn3988_firmware
qualcomm wcn3988
qualcomm wcn3980_firmware
qualcomm wcn3980
qualcomm wcn3950_firmware
qualcomm wcn3950
qualcomm wcd9395_firmware
qualcomm wcd9395
qualcomm wcd9390_firmware
qualcomm wcd9390
qualcomm wcd9385_firmware
qualcomm wcd9385
qualcomm wcd9380_firmware
qualcomm wcd9380
qualcomm wcd9378_firmware
qualcomm wcd9378
qualcomm wcd9375_firmware
qualcomm wcd9375
qualcomm wcd9370_firmware
qualcomm wcd9370
qualcomm wcd9341_firmware
qualcomm wcd9341
qualcomm wcd9340_firmware
qualcomm wcd9340
qualcomm wcd9335_firmware
qualcomm wcd9335
qualcomm wcd9326_firmware
qualcomm wcd9326
qualcomm vision_intelligence_400_platform_firmware
qualcomm vision_intelligence_400_platform
qualcomm sxr1120_firmware
qualcomm sxr1120
qualcomm sw5100p_firmware
qualcomm sw5100p
qualcomm sw5100_firmware
qualcomm sw5100
qualcomm srv1m_firmware
qualcomm srv1m
qualcomm srv1l_firmware
qualcomm srv1l
qualcomm srv1h_firmware
qualcomm srv1h
qualcomm snapdragon_xr1_platform_firmware
qualcomm snapdragon_xr1_platform
qualcomm snapdragon_x75_5g_modem-rf_system_firmware
qualcomm snapdragon_x75_5g_modem-rf_system
qualcomm snapdragon_x72_5g_modem-rf_system_firmware
qualcomm snapdragon_x72_5g_modem-rf_system
qualcomm snapdragon_x35_5g_modem-rf_system_firmware
qualcomm snapdragon_x35_5g_modem-rf_system
qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmware
qualcomm snapdragon_w5\+_gen_1_wearable_platform
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware
qualcomm snapdragon_auto_5g_modem-rf_gen_2
qualcomm snapdragon_auto_5g_modem-rf_firmware
qualcomm snapdragon_auto_5g_modem-rf
qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware
qualcomm snapdragon_8\+_gen_2_mobile_platform
qualcomm snapdragon_8_gen_3_mobile_platform_firmware
qualcomm snapdragon_8_gen_3_mobile_platform
qualcomm snapdragon_8_gen_2_mobile_platform_firmware
qualcomm snapdragon_8_gen_2_mobile_platform
qualcomm snapdragon_8_gen_1_mobile_platform_firmware
qualcomm snapdragon_8_gen_1_mobile_platform
qualcomm snapdragon_710_mobile_platform_firmware
qualcomm snapdragon_710_mobile_platform
qualcomm snapdragon_695_5g_mobile_platform_firmware
qualcomm snapdragon_695_5g_mobile_platform
qualcomm snapdragon_685_4g_mobile_platform_firmware
qualcomm snapdragon_685_4g_mobile_platform
qualcomm snapdragon_680_4g_mobile_platform_firmware
qualcomm snapdragon_680_4g_mobile_platform
qualcomm snapdragon_670_mobile_platform_firmware
qualcomm snapdragon_670_mobile_platform
qualcomm snapdragon_662_mobile_platform_firmware
qualcomm snapdragon_662_mobile_platform
qualcomm snapdragon_480\+_5g_mobile_platform_firmware
qualcomm snapdragon_480\+_5g_mobile_platform
qualcomm snapdragon_480_5g_mobile_platform_firmware
qualcomm snapdragon_480_5g_mobile_platform
qualcomm snapdragon_460_mobile_platform_firmware
qualcomm snapdragon_460_mobile_platform
qualcomm snapdragon_4_gen_1_mobile_platform_firmware
qualcomm snapdragon_4_gen_1_mobile_platform
qualcomm smart_audio_400_platform_firmware
qualcomm smart_audio_400_platform
qualcomm sm8635_firmware
qualcomm sm8635
qualcomm sm8550p_firmware
qualcomm sm8550p
qualcomm sm4635_firmware
qualcomm sm4635
qualcomm sg8275p_firmware
qualcomm sg8275p
qualcomm sg4150p_firmware
qualcomm sg4150p
qualcomm sd670_firmware
qualcomm sd670
qualcomm sa9000p_firmware
qualcomm sa9000p
qualcomm sa8775p_firmware
qualcomm sa8775p
qualcomm sa8770p_firmware
qualcomm sa8770p
qualcomm sa8650p_firmware
qualcomm sa8650p
qualcomm sa8620p_firmware
qualcomm sa8620p
qualcomm sa8295p_firmware
qualcomm sa8295p
qualcomm sa8255p_firmware
qualcomm sa8255p
qualcomm sa8195p_firmware
qualcomm sa8195p
qualcomm sa8155p_firmware
qualcomm sa8155p
qualcomm sa8150p_firmware
qualcomm sa8150p
qualcomm sa8145p_firmware
qualcomm sa8145p
qualcomm sa7775p_firmware
qualcomm sa7775p
qualcomm sa7255p_firmware
qualcomm sa7255p
qualcomm sa6155p_firmware
qualcomm sa6155p
qualcomm sa6150p_firmware
qualcomm sa6150p
qualcomm sa6145p_firmware
qualcomm sa6145p
qualcomm sa4155p_firmware
qualcomm sa4155p
qualcomm sa4150p_firmware
qualcomm sa4150p
qualcomm robotics_rb5_platform_firmware
qualcomm robotics_rb5_platform
qualcomm video_collaboration_vc5_platform_firmware
qualcomm video_collaboration_vc5_platform
qualcomm video_collaboration_vc3_platform_firmware
qualcomm video_collaboration_vc3_platform
qualcomm video_collaboration_vc1_platform_firmware
qualcomm video_collaboration_vc1_platform
qualcomm qru1062_firmware
qualcomm qru1062
qualcomm qru1052_firmware
qualcomm qru1052
qualcomm qru1032_firmware
qualcomm qru1032
qualcomm qrb5165n_firmware
qualcomm qrb5165n
qualcomm qrb5165m_firmware
qualcomm qrb5165m
qualcomm qfw7124_firmware
qualcomm qfw7124
qualcomm qfw7114_firmware
qualcomm qfw7114
qualcomm qep8111_firmware
qualcomm qep8111
qualcomm qdx1011_firmware
qualcomm qdx1011
qualcomm qdx1010_firmware
qualcomm qdx1010
qualcomm qdu1210_firmware
qualcomm qdu1210
qualcomm qdu1110_firmware
qualcomm qdu1110
qualcomm qdu1010_firmware
qualcomm qdu1010
qualcomm qdu1000_firmware
qualcomm qdu1000
qualcomm qcs8550_firmware
qualcomm qcs8550
qualcomm qcs8250_firmware
qualcomm qcs8250
qualcomm qcs7230_firmware
qualcomm qcs7230
qualcomm qcs6490_firmware
qualcomm qcs6490
qualcomm qcs6125_firmware
qualcomm qcs6125
qualcomm qcs610_firmware
qualcomm qcs610
qualcomm qcs5430_firmware
qualcomm qcs5430
qualcomm qcs410_firmware
qualcomm qcs410
qualcomm qcn9012_firmware
qualcomm qcn9012
qualcomm qcn9011_firmware
qualcomm qcn9011
qualcomm qcn6274_firmware
qualcomm qcn6274
qualcomm qcn6224_firmware
qualcomm qcn6224
qualcomm qcm8550_firmware
qualcomm qcm8550
qualcomm qcm6490_firmware
qualcomm qcm6490
qualcomm qcm6125_firmware
qualcomm qcm6125
qualcomm qcm5430_firmware
qualcomm qcm5430
qualcomm qcm4325_firmware
qualcomm qcm4325
qualcomm qcc710_firmware
qualcomm qcc710
qualcomm qca9377_firmware
qualcomm qca9377
qualcomm qca9367_firmware
qualcomm qca9367
qualcomm qca8337_firmware
qualcomm qca8337
qualcomm qca8081_firmware
qualcomm qca8081
qualcomm qca6797aq_firmware
qualcomm qca6797aq
qualcomm qca6698aq_firmware
qualcomm qca6698aq
qualcomm qca6696_firmware
qualcomm qca6696
qualcomm qca6688aq_firmware
qualcomm qca6688aq
qualcomm qca6678aq_firmware
qualcomm qca6678aq
qualcomm qca6595au_firmware
qualcomm qca6595au
qualcomm qca6595_firmware
qualcomm qca6595
qualcomm qca6584au_firmware
qualcomm qca6584au
qualcomm qca6574au_firmware
qualcomm qca6574au
qualcomm qca6574a_firmware
qualcomm qca6574a
qualcomm qca6574_firmware
qualcomm qca6574
qualcomm qca6564au_firmware
qualcomm qca6564au
qualcomm qca6564a_firmware
qualcomm qca6564a
qualcomm qca6391_firmware
qualcomm qca6391
qualcomm qca6174a_firmware
qualcomm qca6174a
qualcomm qamsrv1m_firmware
qualcomm qamsrv1m
qualcomm qamsrv1h_firmware
qualcomm qamsrv1h
qualcomm qam8775p_firmware
qualcomm qam8775p
qualcomm qam8650p_firmware
qualcomm qam8650p
qualcomm qam8620p_firmware
qualcomm qam8620p
qualcomm qam8295p_firmware
qualcomm qam8295p
qualcomm qam8255p_firmware
qualcomm qam8255p
qualcomm mdm9628_firmware
qualcomm mdm9628
qualcomm flight_rb5_5g_platform_firmware
qualcomm flight_rb5_5g_platform
qualcomm fastconnect_7800_firmware
qualcomm fastconnect_7800
qualcomm fastconnect_6900_firmware
qualcomm fastconnect_6900
qualcomm fastconnect_6700_firmware
qualcomm fastconnect_6700
qualcomm fastconnect_6200_firmware
qualcomm fastconnect_6200
qualcomm csra6640_firmware
qualcomm csra6640
qualcomm csra6620_firmware
qualcomm csra6620
qualcomm ar8035_firmware
qualcomm ar8035

References

Frequently Asked Questions

What is CVE-2024-38419? +
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. It has a CVSS v3.1 base score of 7.8 (HIGH).
How severe is CVE-2024-38419? +
CVE-2024-38419 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-38419? +
CVE-2024-38419 affects products from qualcomm, specifically: ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, mdm9628, mdm9628_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6174a, qca6174a_firmware, qca6391, qca6391_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6678aq, qca6678aq_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qca9367, qca9367_firmware, qca9377, qca9377_firmware, qcc710, qcc710_firmware, qcm4325, qcm4325_firmware, qcm5430, qcm5430_firmware, qcm6125, qcm6125_firmware, qcm6490, qcm6490_firmware, qcm8550, qcm8550_firmware, qcn6224, qcn6224_firmware, qcn6274, qcn6274_firmware, qcn9011, qcn9011_firmware, qcn9012, qcn9012_firmware, qcs410, qcs410_firmware, qcs5430, qcs5430_firmware, qcs610, qcs610_firmware, qcs6125, qcs6125_firmware, qcs6490, qcs6490_firmware, qcs7230, qcs7230_firmware, qcs8250, qcs8250_firmware, qcs8550, qcs8550_firmware, qdu1000, qdu1000_firmware, qdu1010, qdu1010_firmware, qdu1110, qdu1110_firmware, qdu1210, qdu1210_firmware, qdx1010, qdx1010_firmware, qdx1011, qdx1011_firmware, qep8111, qep8111_firmware, qfw7114, qfw7114_firmware, qfw7124, qfw7124_firmware, qrb5165m, qrb5165m_firmware, qrb5165n, qrb5165n_firmware, qru1032, qru1032_firmware, qru1052, qru1052_firmware, qru1062, qru1062_firmware, robotics_rb5_platform, robotics_rb5_platform_firmware, sa4150p, sa4150p_firmware, sa4155p, sa4155p_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa7255p, sa7255p_firmware, sa7775p, sa7775p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware, sa8255p, sa8255p_firmware, sa8295p, sa8295p_firmware, sa8620p, sa8620p_firmware, sa8650p, sa8650p_firmware, sa8770p, sa8770p_firmware, sa8775p, sa8775p_firmware, sa9000p, sa9000p_firmware, sd670, sd670_firmware, sg4150p, sg4150p_firmware, sg8275p, sg8275p_firmware, sm4635, sm4635_firmware, sm8550p, sm8550p_firmware, sm8635, sm8635_firmware, smart_audio_400_platform, smart_audio_400_platform_firmware, snapdragon_460_mobile_platform, snapdragon_460_mobile_platform_firmware, snapdragon_480\+_5g_mobile_platform, snapdragon_480\+_5g_mobile_platform_firmware, snapdragon_480_5g_mobile_platform, snapdragon_480_5g_mobile_platform_firmware, snapdragon_4_gen_1_mobile_platform, snapdragon_4_gen_1_mobile_platform_firmware, snapdragon_662_mobile_platform, snapdragon_662_mobile_platform_firmware, snapdragon_670_mobile_platform, snapdragon_670_mobile_platform_firmware, snapdragon_680_4g_mobile_platform, snapdragon_680_4g_mobile_platform_firmware, snapdragon_685_4g_mobile_platform, snapdragon_685_4g_mobile_platform_firmware, snapdragon_695_5g_mobile_platform, snapdragon_695_5g_mobile_platform_firmware, snapdragon_710_mobile_platform, snapdragon_710_mobile_platform_firmware, snapdragon_8\+_gen_2_mobile_platform, snapdragon_8\+_gen_2_mobile_platform_firmware, snapdragon_8_gen_1_mobile_platform, snapdragon_8_gen_1_mobile_platform_firmware, snapdragon_8_gen_2_mobile_platform, snapdragon_8_gen_2_mobile_platform_firmware, snapdragon_8_gen_3_mobile_platform, snapdragon_8_gen_3_mobile_platform_firmware, snapdragon_auto_5g_modem-rf, snapdragon_auto_5g_modem-rf_firmware, snapdragon_auto_5g_modem-rf_gen_2, snapdragon_auto_5g_modem-rf_gen_2_firmware, snapdragon_w5\+_gen_1_wearable_platform, snapdragon_w5\+_gen_1_wearable_platform_firmware, snapdragon_x35_5g_modem-rf_system, snapdragon_x35_5g_modem-rf_system_firmware, snapdragon_x72_5g_modem-rf_system, snapdragon_x72_5g_modem-rf_system_firmware, snapdragon_x75_5g_modem-rf_system, snapdragon_x75_5g_modem-rf_system_firmware, snapdragon_xr1_platform, snapdragon_xr1_platform_firmware, srv1h, srv1h_firmware, srv1l, srv1l_firmware, srv1m, srv1m_firmware, sw5100, sw5100_firmware, sw5100p, sw5100p_firmware, sxr1120, sxr1120_firmware, video_collaboration_vc1_platform, video_collaboration_vc1_platform_firmware, video_collaboration_vc3_platform, video_collaboration_vc3_platform_firmware, video_collaboration_vc5_platform, video_collaboration_vc5_platform_firmware, vision_intelligence_400_platform, vision_intelligence_400_platform_firmware, wcd9326, wcd9326_firmware, wcd9335, wcd9335_firmware, wcd9340, wcd9340_firmware, wcd9341, wcd9341_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9378, wcd9378_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcd9390, wcd9390_firmware, wcd9395, wcd9395_firmware, wcn3950, wcn3950_firmware, wcn3980, wcn3980_firmware, wcn3988, wcn3988_firmware, wcn3990, wcn3990_firmware, wcn6755, wcn6755_firmware, wsa8810, wsa8810_firmware, wsa8815, wsa8815_firmware, wsa8830, wsa8830_firmware, wsa8832, wsa8832_firmware, wsa8835, wsa8835_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-38419? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-38419 — free, no signup required.