CVE-2024-23384
highMemory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
Vendor / product: Qualcomm — wsa8845h firmware
Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
CVSS
8.4
8.4 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (product-security@qualcomm.com)
Timeline (UTC)
Published: 2024-08-05 15:15
Modified: 2026-11-03 22:17
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-11-03 22:24 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
qualcomm / wsa8845h_firmware all versions
qualcomm / wsa8845_firmware all versions
qualcomm / wsa8840_firmware all versions
qualcomm / wsa8835_firmware all versions
qualcomm / wsa8832_firmware all versions
qualcomm / wsa8830_firmware all versions
qualcomm / wsa8815_firmware all versions
qualcomm / wsa8810_firmware all versions
qualcomm / wcn3990_firmware all versions
qualcomm / wcn3988_firmware all versions
qualcomm / wcn3980_firmware all versions
qualcomm / wcn3950_firmware all versions
qualcomm / wcd9395_firmware all versions
qualcomm / wcd9390_firmware all versions
qualcomm / wcd9385_firmware all versions
qualcomm / wcd9380_firmware all versions
qualcomm / wcd9375_firmware all versions
qualcomm / wcd9370_firmware all versions
qualcomm / wcd9341_firmware all versions
qualcomm / wcd9335_firmware all versions
qualcomm / vision_intelligence_400_platform_firmware all versions
qualcomm / talynplus_firmware all versions
qualcomm / sxr2250p_firmware all versions
qualcomm / sxr2230p_firmware all versions
qualcomm / sxr1230p_firmware all versions
qualcomm / sw5100p_firmware all versions
qualcomm / sw5100_firmware all versions
qualcomm / ssg2125p_firmware all versions
qualcomm / ssg2115p_firmware all versions
qualcomm / srv1m_firmware all versions
qualcomm / srv1l_firmware all versions
qualcomm / srv1h_firmware all versions
qualcomm / snapdragon_w5\+_gen_1_wearable_platform_firmware all versions
qualcomm / snapdragon_ar2_gen_1_platform_firmware all versions
qualcomm / snapdragon_8\+_gen_2_mobile_platform_firmware all versions
qualcomm / snapdragon_8\+_gen_1_mobile_platform_firmware all versions
qualcomm / snapdragon_8_gen_3_mobile_platform_firmware all versions
qualcomm / snapdragon_8_gen_2_mobile_platform_firmware all versions
qualcomm / snapdragon_8_gen_1_mobile_platform_firmware all versions
qualcomm / snapdragon_695_5g_mobile_platform_firmware all versions
qualcomm / snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware all versions
qualcomm / snapdragon_680_4g_mobile_platform_firmware all versions
qualcomm / snapdragon_662_mobile_platform_firmware all versions
qualcomm / snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware all versions
qualcomm / snapdragon_480_5g_mobile_platform_firmware all versions
qualcomm / snapdragon_460_mobile_platform_firmware all versions
qualcomm / snapdragon_4_gen_2_mobile_platform_firmware all versions
qualcomm / snapdragon_4_gen_1_mobile_platform_firmware all versions
qualcomm / sm8550p_firmware all versions
qualcomm / sg8275p_firmware all versions
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.ht... product-security@qualcomm.com
Data sources
NVD CVE API 2.0 — fetched 2026-11-03 22:24 UTC · record ↗