What’s Vulnerable › Vulnerabilities

CVE-2024-23379: Double Free in DSP Services

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-07 · updated 2026-06-17
• Weakness: CWE-415

Description

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

Affected products

• Qualcomm Fastconnect 6900 Firmware: all versions
• Qualcomm Fastconnect 7800 Firmware: all versions
• Qualcomm Qam8255P Firmware: all versions
• Qualcomm Qam8650P Firmware: all versions
• Qualcomm Qam8775P Firmware: all versions
• Qualcomm Qamsrv1H Firmware: all versions
• Qualcomm Qamsrv1M Firmware: all versions
• Qualcomm Qca6310 Firmware: all versions
• Qualcomm Qca6320 Firmware: all versions
• Qualcomm Qca6584Au Firmware: all versions
• Qualcomm Qca6698Aq Firmware: all versions
• Qualcomm Sa7255P Firmware: all versions
• Qualcomm Sa7775P Firmware: all versions
• Qualcomm Sa8255P Firmware: all versions
• Qualcomm Sa8620P Firmware: all versions
• Qualcomm Sa8650P Firmware: all versions
• Qualcomm Sa8770P Firmware: all versions
• Qualcomm Sa8775P Firmware: all versions
• Qualcomm Sa9000P Firmware: all versions
• Qualcomm Sd835 Firmware: all versions
• Qualcomm Snapdragon 835 Mobile Pc Platform Firmware: all versions
• Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon Auto 5G Modem-Rf Gen 2 Firmware: all versions
• Qualcomm Srv1H Firmware: all versions
• Qualcomm Srv1M Firmware: all versions
• Qualcomm Wcd9335 Firmware: all versions
• Qualcomm Wcd9340 Firmware: all versions
• Qualcomm Wcd9341 Firmware: all versions
• Qualcomm Wcd9380 Firmware: all versions
• Qualcomm Wcn3990 Firmware: all versions

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

Get alerted when CVE-2024-23379 or the next vulnerability affects your stack