Back to the CVE list
CVE-2024-23384

Use After Free in Graphics Linux

CVSS score

8.4

EPSS probability

%0.1

Risk score

0.0

Published

2 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2024-23384 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2024-23384 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Qualcomm, Inc.Snapdragon View
2qualcommwsa8845h firmware View
3qualcommwsa8845h View
4qualcommwsa8845 firmware View
5qualcommwsa8845 View
6qualcommwsa8840 firmware View
7qualcommwsa8840 View
8qualcommwsa8835 firmware View
9qualcommwsa8835 View
10qualcommwsa8832 firmware View
11qualcommwsa8832 View
12qualcommwsa8830 firmware View
13qualcommwsa8830 View
14qualcommwsa8815 firmware View
15qualcommwsa8815 View
16qualcommwsa8810 firmware View
17qualcommwsa8810 View
18qualcommwcn3990 firmware View
19qualcommwcn3990 View
20qualcommwcn3988 firmware View
21qualcommwcn3988 View
22qualcommwcn3980 firmware View
23qualcommwcn3980 View
24qualcommwcn3950 firmware View
25qualcommwcn3950 View
26qualcommwcd9395 firmware View
27qualcommwcd9395 View
28qualcommwcd9390 firmware View
29qualcommwcd9390 View
30qualcommwcd9385 firmware View
31qualcommwcd9385 View
32qualcommwcd9380 firmware View
33qualcommwcd9380 View
34qualcommwcd9375 firmware View
35qualcommwcd9375 View
36qualcommwcd9370 firmware View
37qualcommwcd9370 View
38qualcommwcd9341 firmware View
39qualcommwcd9341 View
40qualcommwcd9335 firmware View
41qualcommwcd9335 View
42qualcommvision intelligence 400 platform firmware View
43qualcommvision intelligence 400 platform View
44qualcommtalynplus firmware View
45qualcommtalynplus View
46qualcommsxr2250p firmware View
47qualcommsxr2250p View
48qualcommsxr2230p firmware View
49qualcommsxr2230p View
50qualcommsxr1230p firmware View
51qualcommsxr1230p View
52qualcommsw5100p firmware View
53qualcommsw5100p View
54qualcommsw5100 firmware View
55qualcommsw5100 View
56qualcommssg2125p firmware View
57qualcommssg2125p View
58qualcommssg2115p firmware View
59qualcommssg2115p View
60qualcommsrv1m firmware View
61qualcommsrv1m View
62qualcommsrv1l firmware View
63qualcommsrv1l View
64qualcommsrv1h firmware View
65qualcommsrv1h View
66qualcommsnapdragon w5+ gen 1 wearable platform firmware View
67qualcommsnapdragon w5+ gen 1 wearable platform View
68qualcommsnapdragon ar2 gen 1 platform firmware View
69qualcommsnapdragon ar2 gen 1 platform View
70qualcommsnapdragon 8 gen 2 mobile platform firmware View
71qualcommsnapdragon 8 gen 2 mobile platform View
72qualcommsnapdragon 8 gen 1 mobile platform firmware View
73qualcommsnapdragon 8 gen 1 mobile platform View
74qualcommsnapdragon 8 gen 3 mobile platform firmware View
75qualcommsnapdragon 8 gen 3 mobile platform View
76qualcommsnapdragon 695 5g mobile platform firmware View
77qualcommsnapdragon 695 5g mobile platform View
78qualcommsnapdragon 685 4g mobile platform (sm6225-ad) firmware View
79qualcommsnapdragon 685 4g mobile platform (sm6225-ad) View
80qualcommsnapdragon 680 4g mobile platform firmware View
81qualcommsnapdragon 680 4g mobile platform View
82qualcommsnapdragon 662 mobile platform firmware View
83qualcommsnapdragon 662 mobile platform View
84qualcommsnapdragon 480+ 5g mobile platform (sm4350-ac) firmware View
85qualcommsnapdragon 480+ 5g mobile platform (sm4350-ac) View
86qualcommsnapdragon 480 5g mobile platform firmware View
87qualcommsnapdragon 480 5g mobile platform View
88qualcommsnapdragon 460 mobile platform firmware View
89qualcommsnapdragon 460 mobile platform View
90qualcommsnapdragon 4 gen 2 mobile platform firmware View
91qualcommsnapdragon 4 gen 2 mobile platform View
92qualcommsnapdragon 4 gen 1 mobile platform firmware View
93qualcommsnapdragon 4 gen 1 mobile platform View
94qualcommsm8550p firmware View
95qualcommsm8550p View
96qualcommsg8275p firmware View
97qualcommsg8275p View
98qualcommsg4150p firmware View
99qualcommsg4150p View
100qualcommsd 8 gen1 5g firmware View
101qualcommsd 8 gen1 5g View
102qualcommsa9000p firmware View
103qualcommsa9000p View
104qualcommsa8775p firmware View
105qualcommsa8775p View
106qualcommsa8770p firmware View
107qualcommsa8770p View
108qualcommsa8650p firmware View
109qualcommsa8650p View
110qualcommsa8620p firmware View
111qualcommsa8620p View
112qualcommsa8295p firmware View
113qualcommsa8295p View
114qualcommsa8255p firmware View
115qualcommsa8255p View
116qualcommsa8195p firmware View
117qualcommsa8195p View
118qualcommsa8155p firmware View
119qualcommsa8155p View
120qualcommsa7775p firmware View
121qualcommsa7775p View
122qualcommsa7255p firmware View
123qualcommsa7255p View
124qualcommsa6155p firmware View
125qualcommsa6155p View
126qualcommrobotics rb5 platform firmware View
127qualcommrobotics rb5 platform View
128qualcommvideo collaboration vc5 platform firmware View
129qualcommvideo collaboration vc5 platform View
130qualcommvideo collaboration vc3 platform firmware View
131qualcommvideo collaboration vc3 platform View
132qualcommvideo collaboration vc1 platform firmware View
133qualcommvideo collaboration vc1 platform View
134qualcommqrb5165n firmware View
135qualcommqrb5165n View
136qualcommqcs8550 firmware View
137qualcommqcs8550 View
138qualcommqcs8250 firmware View
139qualcommqcs8250 View
140qualcommqcs7230 firmware View
141qualcommqcs7230 View
142qualcommqcs6490 firmware View
143qualcommqcs6490 View
144qualcommqcs6125 firmware View
145qualcommqcs6125 View
146qualcommqcs5430 firmware View
147qualcommqcs5430 View
148qualcommqcs4490 firmware View
149qualcommqcs4490 View
150qualcommqcm8550 firmware View
151qualcommqcm8550 View
152qualcommqcm6490 firmware View
153qualcommqcm6490 View
154qualcommqcm6125 firmware View
155qualcommqcm6125 View
156qualcommqcm5430 firmware View
157qualcommqcm5430 View
158qualcommqcm4490 firmware View
159qualcommqcm4490 View
160qualcommqcm4325 firmware View
161qualcommqcm4325 View
162qualcommqca6797aq firmware View
163qualcommqca6797aq View
164qualcommqca6698aq firmware View
165qualcommqca6698aq View
166qualcommqca6696 firmware View
167qualcommqca6696 View
168qualcommqca6678aq firmware View
169qualcommqca6678aq View
170qualcommqca6595au firmware View
171qualcommqca6595au View
172qualcommqca6595 firmware View
173qualcommqca6595 View
174qualcommqca6574au firmware View
175qualcommqca6574au View
176qualcommqca6574a firmware View
177qualcommqca6574a View
178qualcommqca6574 firmware View
179qualcommqca6574 View
180qualcommqca6391 firmware View
181qualcommqca6391 View
182qualcommqamsrv1m firmware View
183qualcommqamsrv1m View
184qualcommqamsrv1h firmware View
185qualcommqamsrv1h View
186qualcommqam8775p firmware View
187qualcommqam8775p View
188qualcommqam8650p firmware View
189qualcommqam8650p View
190qualcommqam8620p firmware View
191qualcommqam8620p View
192qualcommqam8295p firmware View
193qualcommqam8295p View
194qualcommqam8255p firmware View
195qualcommqam8255p View
196qualcommflight rb5 5g platform firmware View
197qualcommflight rb5 5g platform View
198qualcommfastconnect 7800 firmware View
199qualcommfastconnect 7800 View
200qualcommfastconnect 6900 firmware View
Total affected vendors: 2|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.4CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD
8.4CVSS V3_1HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-23384 is associated with the following CWEs:

CWE-416: Use After Free

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-23384 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

8.4 / 10
Attack VectorLocalComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

QI
Qualcomm, Inc. logo
Qualcomm, Inc.
Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-416

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-23384"
CVE-2024-23384 · Use After Free in Graphics Linux · DayBreach