Description

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

INFO

Published Date :

2025-01-06T10:33:13.770Z

Last Modified :

2025-01-06T14:18:36.413Z

Source :

qualcomm
AFFECTED PRODUCTS

The following products are affected by CVE-2024-23366 vulnerability.

Vendors Products
Qualcomm
  • Qam8255p
  • Qam8255p Firmware
  • Qam8295p
  • Qam8295p Firmware
  • Qam8650p
  • Qam8650p Firmware
  • Qam8775p
  • Qam8775p Firmware
  • Qamsrv1h
  • Qamsrv1h Firmware
  • Qca6595
  • Qca6595 Firmware
  • Qca6595au
  • Qca6595au Firmware
  • Qca6696
  • Qca6696 Firmware
  • Qca6698aq
  • Qca6698aq Firmware
  • Sa8255p
  • Sa8255p Firmware
  • Sa8295p
  • Sa8295p Firmware
  • Sa8540p
  • Sa8540p Firmware
  • Sa8650p
  • Sa8650p Firmware
  • Sa8770p
  • Sa8770p Firmware
  • Sa8775p
  • Sa8775p Firmware
  • Sa9000p
  • Sa9000p Firmware
  • Srv1h
  • Srv1h Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-23366.

URL Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact