VDB

CVE-2024-21481

CVE-2024-21481 PUBLISHED CVSS 8.4 HIGH

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Reported by qualcomm · Published August 5, 2024

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.

Risk scores

CVSS 3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000, AR8035, FastConnect 6200
qualcommsnapdragon_x62_5g_modem-rf_system_firmware0
qualcommqdu1000_firmware0
qualcommsa6145p_firmware0
qualcommwcd9340_firmware0
qualcommsa8295p_firmware0
qualcommfastconnect_6900_firmware0
qualcommqdx1010_firmware0
qualcommsnapdragon_xr2_5g_platform_firmware0
qualcommsnapdragon_675_mobile_platform_firmware0
qualcommfastconnect_6700_firmware0
qualcommqualcomm_video_collaboration_vc3_platform_firmware0
qualcommsg8275p_firmware0
qualcommsa7255p_firmware0
qualcommsnapdragon_888_5g_mobile_platform_firmware0
Qualcomm, Inc.SnapdragonSnapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB), Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), Snapdragon 8cx Compute Platform (SC8180X-AA, AB)
qualcommsnapdragon_ar2_gen_1_platform_firmware0
qualcommsdx57m_firmware0
qualcommfastconnect_6200_firmware0
qualcommqcn6274_firmware0

…and 126 more

Timeline

  • Aug 5, 2024 CVE Published
  • Aug 6, 2024 EPSS Score (30 in total, the first dated here)
  • Aug 15, 2024 CVE Updated
  • Jun 2, 2026 Security Advisory
  • Jul 20, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-21481
vulnetix vdb fixes CVE-2024-21481

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-21481/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›