Memory Corruption in Qualcomm Products Due to IPA Statistics Processing
CVE-2024-21464
8.4HIGH
Summary
This vulnerability involves memory corruption during the processing of IPA (Intelligent Power Architecture) statistics when no active clients are registered. This can lead to unstable system behavior and potential exploitation in affected Qualcomm products, particularly impacting various Snapdragon chipsets and networking solutions. It is crucial for users and administrators to evaluate their systems and apply necessary security measures to mitigate risks associated with this vulnerability.
Affected Version(s)
Snapdragon Snapdragon Auto FastConnect 6700
Snapdragon Snapdragon Auto FastConnect 6900
Snapdragon Snapdragon Auto FastConnect 7800
References
CVSS V3.1
Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database