Information Disclosure Vulnerability in Qualcomm Mailbox API

CVE-2024-23366

What is CVE-2024-23366?

An information disclosure vulnerability exists in Qualcomm's Mailbox API that is triggered when the API is invoked with a user message exceeding the mailbox size limits. This flaw can expose sensitive information, potentially compromising user privacy and system integrity. Proper validation and size checks should be implemented to mitigate the impact of this vulnerability.

References