CVE-2024-23370: Qualcomm QCA6584AU Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

Affected products

• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA9367 Firmware: affected versions not specified
• Qualcomm QCA9377 Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3988 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified

Published 2024-10-07. Last modified 2026-06-17.