CVE-2024-23377: Qualcomm Fastconnect 6900 Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Affected products

  • Qualcomm Fastconnect 6900 Firmware: affected versions not specified
  • Qualcomm Fastconnect 7800 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCM8550 Firmware: affected versions not specified
  • Qualcomm QCS7230 Firmware: affected versions not specified
  • Qualcomm QCS8250 Firmware: affected versions not specified
  • Qualcomm QCS8550 Firmware: affected versions not specified
  • Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
  • Qualcomm SG8275 Firmware: affected versions not specified
  • Qualcomm SG8275P Firmware: affected versions not specified
  • Qualcomm SM7525 Firmware: affected versions not specified
  • Qualcomm SM7550 Firmware: affected versions not specified
  • Qualcomm SM8550P Firmware: affected versions not specified
  • Qualcomm Snapdragon 8+ Gen 2 Mobile Platform Firmware: affected versions not specified
  • Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware: affected versions not specified
  • Qualcomm Snapdragon AR2 Gen 1 Platform Firmware: affected versions not specified
  • Qualcomm SSG2115P Firmware: affected versions not specified
  • Qualcomm SSG2125P Firmware: affected versions not specified
  • Qualcomm SXR1230P Firmware: affected versions not specified
  • Qualcomm SXR2230P Firmware: affected versions not specified
  • Qualcomm SXR2250P Firmware: affected versions not specified
  • Qualcomm Video Collaboration VC5 Platform Firmware: affected versions not specified
  • Qualcomm WCD9370 Firmware: affected versions not specified
  • Qualcomm WCD9371 Firmware: affected versions not specified
  • Qualcomm WCD9375 Firmware: affected versions not specified
  • and 14 more

Published 2024-11-04. Last modified 2026-06-17.