ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-21460

—
CVSS 3.1
6.5 medium
EPSS
<1%p1
Published
()
Modified
Description

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Vendors
qualcomm
Products
fastconnect 6900 firmware, fastconnect 7800 firmware, qcm8550 firmware, qcs8550 firmware, sg8275p firmware, sm8550p firmware, snapdragon 8 gen 2 mobile platform firmware, snapdragon 8\+ gen 2 mobile platform firmware, wcd9380 firmware, wcd9385 firmware, wcd9390 firmware, wcd9395 firmware
Weakness
CWE-330
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.