PT-2023-9276 · Qualcomm · Qualcomm Embedded Platform

CVE-2024-23368

·

Publicado

2023-12-19

·

Atualizado

2024-07-04

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform software (affected versions not specified)
Description The issue is related to a memory corruption problem when allocating and accessing an entry in an SMEM partition. It is also described as a vulnerability in the SMEM Partition Handler component of Qualcomm's microprogrammed embedded platform software, which is associated with buffer copying without checking the size of input data. This could allow an attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-05880
CVE-2024-23368

Produtos afetados

Qualcomm Embedded Platform