Situació de competició a la càmera per Time-of-check Time-of-use (TOCTOU)
07/11/2024
CVE-2024-38407
ALT (7,8)
CVSS3: 0,0
Corrupció de memòria mentre es processen els paràmetres d’entrada per a qualsevol trucada IOCTL al controlador del codificador JPEG.
Sistemes Afectats
- Qualcomm, Inc. Snapdragon – AQT1000 – FastConnect 6200 – FastConnect 6700 – FastConnect 6800 – FastConnect 6900 – FastConnect 7800 – QCA6391 – QCA6420 – QCA6430 – QCM5430 – QCM6490 – QCS5430 – QCS6490 – Qualcomm Video Collaboration VC3 Platform – SC8180X+SDX55 – SC8380XP – SDM429W – SM6250 – Snapdragon 429 Mobile Platform – Snapdragon 7c Compute Platform (SC7180-AC) – Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) “Rennell Pro” – Snapdragon 7c+ Gen 3 Compute – Snapdragon 8c Compute Platform (SC8180X-AD) “Poipu Lite” – Snapdragon 8c Compute Platform (SC8180XP-AD) “Poipu Lite” – Snapdragon 8cx Compute Platform (SC8180X-AA, AB) – Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) “Poipu Pro” – Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) “Poipu Pro” – Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB) – Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB) – WCD9340 – WCD9341 – WCD9370 – WCD9375 – WCD9380 – WCD9385 – WCN3620 – WCN3660B – WSA8810 – WSA8815 – WSA8830 – WSA8835 – WSA8840 – WSA8845 – WSA8845H
Remediació
No hi ha cap recurs disponible a partir del 4 de novembre de 2024.
25