Vulnerability · Published Jul 1, 2024 · Assigned by qualcomm
CVE-2024-21482Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader
Medium 6.8
In plain English
A medium-severity memory corruption in Snapdragon from Qualcomm, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.1%top 98.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Snapdragon | CSR8811Immersive Home 214 PlatformImmersive Home 216 PlatformImmersive Home 316 PlatformImmersive Home 318 PlatformImmersive Home 3210 PlatformImmersive Home 326 PlatformIPQ5010 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H