CVE-2024-23377

Medium

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system…

qualcomm·CWE-823·Published 2024-11-04

CVSS

6.7

EPSS

0.00

KEV

Exploits

cve.orgen

190 chars

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

NVDen

190 chars

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Corrupción de memoria al invocar el comando IOCTL desde el espacio de usuario, cuando un usuario modifica el tamaño del paquete original del comando después de que las propiedades del sistema ya se hayan enviado al controlador EVA.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	6.7	—	—	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H