Dashboard / CVE-2024-23384

CVE-2024-23384

HIGH
MEDIUM Priority: 0.01 BB Relevance: 52/100
Published: 2024-08-05 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

Weakness Classification (1)

Affected Software (312)

VendorProductVersion
Qualcomm, Inc. Snapdragon FastConnect 6200
Qualcomm, Inc. Snapdragon FastConnect 6700
Qualcomm, Inc. Snapdragon FastConnect 6900
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon Flight RB5 5G Platform
Qualcomm, Inc. Snapdragon QAM8255P
Qualcomm, Inc. Snapdragon QAM8295P
Qualcomm, Inc. Snapdragon QAM8620P
Qualcomm, Inc. Snapdragon QAM8650P
Qualcomm, Inc. Snapdragon QAM8775P
Qualcomm, Inc. Snapdragon QAMSRV1H
Qualcomm, Inc. Snapdragon QAMSRV1M
Qualcomm, Inc. Snapdragon QCA6391
Qualcomm, Inc. Snapdragon QCA6574
Qualcomm, Inc. Snapdragon QCA6574A
Qualcomm, Inc. Snapdragon QCA6574AU
Qualcomm, Inc. Snapdragon QCA6595
Qualcomm, Inc. Snapdragon QCA6595AU
Qualcomm, Inc. Snapdragon QCA6678AQ
Qualcomm, Inc. Snapdragon QCA6696
Qualcomm, Inc. Snapdragon QCA6698AQ
Qualcomm, Inc. Snapdragon QCA6797AQ
Qualcomm, Inc. Snapdragon QCM4325
Qualcomm, Inc. Snapdragon QCM4490
Qualcomm, Inc. Snapdragon QCM5430
Qualcomm, Inc. Snapdragon QCM6125
Qualcomm, Inc. Snapdragon QCM6490
Qualcomm, Inc. Snapdragon QCM8550
Qualcomm, Inc. Snapdragon QCS4490
Qualcomm, Inc. Snapdragon QCS5430
Showing 30 of 312 entries

References & Advisories (1)

Bug Bounty Relevance

52 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.4 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.11%
Raw Score 0.001140
Percentile 1.5%
Date 2026-11-04

EPSS Trend

2026-11-04
0.00114
2026-11-03
0.00114

Intelligence Sources

mitre ref →
nvd ref →

External Links