CVE-2024-21455: Qualcomm QAM8295P Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Affected products

• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6595 Firmware: affected versions not specified
• Qualcomm QCA6688AQ Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCM6125 Firmware: affected versions not specified
• Qualcomm QCS6125 Firmware: affected versions not specified
• Qualcomm SA8295P Firmware: affected versions not specified
• Qualcomm SG4150P Firmware: affected versions not specified
• Qualcomm Snapdragon 680 4g Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 685 4g Mobile Platform (sm6225-Ad) Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm Video Collaboration VC1 Platform Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCN3950 Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WSA8810 Firmware: affected versions not specified
• Qualcomm WSA8815 Firmware: affected versions not specified

Published 2024-10-07. Last modified 2026-06-17.