CVE-2024-23378: Qualcomm QAM8255P Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

Affected products

• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8650P Firmware: affected versions not specified
• Qualcomm QAM8775P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm SA7255P Firmware: affected versions not specified
• Qualcomm SA7775P Firmware: affected versions not specified
• Qualcomm SA8255P Firmware: affected versions not specified
• Qualcomm SA8620P Firmware: affected versions not specified
• Qualcomm SA8650P Firmware: affected versions not specified
• Qualcomm SA8770P Firmware: affected versions not specified
• Qualcomm SA8775P Firmware: affected versions not specified
• Qualcomm SA9000P Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm SRV1H Firmware: affected versions not specified
• Qualcomm SRV1M Firmware: affected versions not specified

Published 2024-10-07. Last modified 2026-06-17.