CVE-2024-23374
MEDIUMCVSS 6.7/10EPSS 0.11%
Last modified
CVE-2024-23374 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Wsa8835 Firmware | All versions |
| Qualcomm | Wsa8830 Firmware | All versions |
| Qualcomm | Wcn3988 Firmware | All versions |
| Qualcomm | Wcn3980 Firmware | All versions |
| Qualcomm | Wcd9380 Firmware | All versions |
| Qualcomm | Sw5100p Firmware | All versions |
| Qualcomm | Sw5100 Firmware | All versions |
| Qualcomm | Snapdragon W5\+ Gen 1 Wearable Platform Firmware | All versions |
| Qualcomm | Snapdragon Auto 5g Modem-Rf Gen 2 Firmware | All versions |
| Qualcomm | Snapdragon 8 Gen 1 Mobile Platform Firmware | All versions |
| Qualcomm | Sa8195p Firmware | All versions |
| Qualcomm | Sa8155p Firmware | All versions |
| Qualcomm | Sa8150p Firmware | All versions |
| Qualcomm | Sa8145p Firmware | All versions |
| Qualcomm | Sa6155p Firmware | All versions |
| Qualcomm | Sa6150p Firmware | All versions |
| Qualcomm | Sa6145p Firmware | All versions |
| Qualcomm | Qca9377 Firmware | All versions |
| Qualcomm | Qca9367 Firmware | All versions |
| Qualcomm | Qca6698aq Firmware | All versions |
| Qualcomm | Qca6696 Firmware | All versions |
| Qualcomm | Qca6584au Firmware | All versions |
| Qualcomm | Qca6574au Firmware | All versions |
| Qualcomm | Qca6174a Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-23374?
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
How severe is CVE-2024-23374?
CVE-2024-23374 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 0.11% probability of exploitation in the next 30 days.
How do I fix CVE-2024-23374?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-23368Memory corruption when allocating and accessing an entry in …7.8
- CVE-2024-23369Memory corruption when invalid length is provided from HLOS …7.8
- CVE-2024-2337The Easy Testimonials plugin for WordPress is vulnerable to …5.4
- CVE-2024-23370Memory corruption when a process invokes IOCTL calls from us…6.7
- CVE-2024-23372Memory corruption while invoking IOCTL call for GPU memory a…7.8
- CVE-2024-23373Memory corruption when IOMMU unmap operation fails, the DMA …7.8
- CVE-2024-23375Memory corruption during the network scan request.6.7
- CVE-2024-23376Memory corruption while sending the persist buffer command p…6.7
- CVE-2024-23377Memory corruption while invoking IOCTL command from user-spa…6.7
- CVE-2024-23378Memory corruption while invoking IOCTL calls for MSM module …6.7
- CVE-2024-23379Memory corruption while unmapping the fastrpc map when two t…6.7
- CVE-2024-2338PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerab…7.5
Are you affected by CVE-2024-23374?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST