CVE-2024-23376: Qualcomm Fastconnect 6900 Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.

Affected products

  • Qualcomm Fastconnect 6900 Firmware: affected versions not specified
  • Qualcomm Fastconnect 7800 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6696 Firmware: affected versions not specified
  • Qualcomm SA6145P Firmware: affected versions not specified
  • Qualcomm SA6150P Firmware: affected versions not specified
  • Qualcomm SA6155P Firmware: affected versions not specified
  • Qualcomm SA8145P Firmware: affected versions not specified
  • Qualcomm SA8150P Firmware: affected versions not specified
  • Qualcomm SA8155P Firmware: affected versions not specified
  • Qualcomm SA8195P Firmware: affected versions not specified
  • Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware: affected versions not specified
  • Qualcomm Snapdragon w5+ Gen 1 Wearable Platform Firmware: affected versions not specified
  • Qualcomm SW5100 Firmware: affected versions not specified
  • Qualcomm SW5100P Firmware: affected versions not specified
  • Qualcomm WCD9380 Firmware: affected versions not specified
  • Qualcomm WCN3980 Firmware: affected versions not specified
  • Qualcomm WCN3988 Firmware: affected versions not specified
  • Qualcomm WSA8830 Firmware: affected versions not specified
  • Qualcomm WSA8835 Firmware: affected versions not specified

Published 2024-10-07. Last modified 2026-06-17.