CVE-2024-38410: Qualcomm Fastconnect 6700 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Affected products

• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCC2073 Firmware: affected versions not specified
• Qualcomm QCC2076 Firmware: affected versions not specified
• Qualcomm QCM5430 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS5430 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm SC8380XP Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm Snapdragon 429 Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 8cx Gen 3 Compute Platform Firmware: affected versions not specified
• Qualcomm Video Collaboration VC3 Platform Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN3620 Firmware: affected versions not specified
• Qualcomm WCN3660B Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified
• Qualcomm WSA8840 Firmware: affected versions not specified
• Qualcomm WSA8845 Firmware: affected versions not specified
• Qualcomm WSA8845H Firmware: affected versions not specified

Published 2024-11-04. Last modified 2026-06-17.