CVE-2024-21460: Qualcomm Fastconnect 6900 Firmware

Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Affected products

• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCM8550 Firmware: affected versions not specified
• Qualcomm QCS8550 Firmware: affected versions not specified
• Qualcomm SG8275P Firmware: affected versions not specified
• Qualcomm SM8550P Firmware: affected versions not specified
• Qualcomm Snapdragon 8+ Gen 2 Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCD9390 Firmware: affected versions not specified
• Qualcomm WCD9395 Firmware: affected versions not specified
• Qualcomm WSA8840 Firmware: affected versions not specified
• Qualcomm WSA8845 Firmware: affected versions not specified
• Qualcomm WSA8845H Firmware: affected versions not specified

Published 2024-07-01. Last modified 2026-06-17.