Skip to content
Fencer Vulns
medium 6.7

CVE-2024-23374 json

Stack-based Buffer Overflow in Power Management IC

published 2024-10-07 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-20878

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 1%
public exploits
0
none known

Summary

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.11% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm qca6174a_firmware
  • qualcomm qca6574au_firmware
  • qualcomm qca6584au_firmware
  • qualcomm qca6696_firmware
  • qualcomm qca6698aq_firmware
  • qualcomm qca9367_firmware
  • qualcomm qca9377_firmware
  • qualcomm sa6145p_firmware
  • qualcomm sa6150p_firmware
  • qualcomm sa6155p_firmware
  • qualcomm sa8145p_firmware
  • qualcomm sa8150p_firmware
  • qualcomm sa8155p_firmware
  • qualcomm sa8195p_firmware
  • qualcomm snapdragon_8_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware
  • qualcomm sw5100_firmware
  • qualcomm sw5100p_firmware
  • qualcomm wcd9380_firmware
  • qualcomm wcn3980_firmware
  • qualcomm wcn3988_firmware
  • qualcomm wsa8830_firmware
  • qualcomm wsa8835_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.