Skip to main content

Wcd9340 Firmware EUVDEUVD-2024-54638

| CVE-2024-53015 MEDIUM
Use After Free (CWE-416)
2025-06-03 product-security@qualcomm.com
Use After Free Buffer Overflow Memory Corruption Wcd9340 Firmware Snapdragon 480 5g Mobile Platform Firmware Qca6310 Firmware Aqt1000 Firmware Snapdragon 778g 5g Mobile Platform Firmware Snapdragon 720g Mobile Platform Firmware Sd855 Firmware Sm8550p Firmware Sa8195p Firmware Sm7635 Firmware Wcd9335 Firmware Wsa8840 Firmware Wcn3988 Firmware Snapdragon Ar1 Gen 1 Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Qca6320 Firmware Wcd9390 Firmware Wsa8830 Firmware Sm7325p Firmware Snapdragon 695 5g Mobile Platform Firmware Sm7675p Firmware Wcn3990 Firmware Wcd9370 Firmware Sa4155p Firmware Snapdragon 8 Gen 2 Mobile Platform Firmware Qcs4490 Firmware Fastconnect 6800 Firmware Sd835 Firmware Sm8650q Firmware Wsa8810 Firmware Fastconnect 6900 Firmware Wcn3620 Firmware Snapdragon 690 5g Mobile Platform Firmware Wcn3950 Firmware Wcd9341 Firmware Wcn3660b Firmware Snapdragon 680 4g Mobile Platform Firmware Wcn7881 Firmware Wcn6650 Firmware Sm6650p Firmware Sa6155p Firmware Wcn6450 Firmware Wsa8832 Firmware Snapdragon 888 5g Mobile Platform Firmware Snapdragon 460 Mobile Platform Firmware Wcd9395 Firmware Sxr2250p Firmware Fastconnect 6200 Firmware Wcd9380 Firmware Wcn7861 Firmware Snapdragon 662 Mobile Platform Firmware Wcn6755 Firmware Snapdragon 855 Mobile Platform Firmware Sdm429w Firmware Snapdragon 4 Gen 1 Mobile Platform Firmware Wsa8845 Firmware Sa4150p Firmware Wcd9385 Firmware Sm4635 Firmware Snapdragon 865 5g Mobile Platform Firmware Snapdragon 835 Mobile Pc Platform Firmware Qca6391 Firmware Sm8635p Firmware Snapdragon X55 5g Modem Rf System Firmware Wsa8835 Firmware Wcd9378 Firmware Sxr2330p Firmware Sxr2230p Firmware Sa8155p Firmware Sm6250 Firmware Wsa8815 Firmware Qcm4490 Firmware Wsa8845h Firmware Sm6650 Firmware Sm7675 Firmware Snapdragon 429 Mobile Platform Firmware Fastconnect 6700 Firmware Fastconnect 7800 Firmware Sm8635 Firmware Wcd9375 Firmware
6.6
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.6 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
Low

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 17:04 euvd
EUVD-2024-54638
Analysis Generated
Mar 14, 2026 - 17:04 vuln.today
CVE Published
Jun 03, 2025 - 06:15 nvd
MEDIUM 6.6

DescriptionCVE.org

Memory corruption while processing IOCTL command to handle buffers associated with a session.

Analysis

Memory corruption while processing IOCTL command to handle buffers associated with a session.

Technical ContextAI

A use-after-free vulnerability occurs when a program continues to use a pointer after the referenced memory has been freed, leading to undefined behavior. This vulnerability is classified as Use After Free (CWE-416).

RemediationAI

Use memory-safe languages. Implement proper object lifecycle management. Use static and dynamic analysis tools to detect UAF patterns.

More in Wcd9340 Firmware

View all
CVE-2024-21480 CRITICAL
9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul
CVE-2024-21473 CRITICAL
9.8 Apr 01

Memory corruption while redirecting log file to any file location with any file name. Rated critical severity (CVSS 9.8)
CVE-2024-21463 CRITICAL
9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-33083 CRITICAL
9.8 Dec 05

Memory corruption in WLAN Host while processing RRM beacon on the AP. Rated critical severity (CVSS 9.8), this vulnerabi
CVE-2023-33082 CRITICAL
9.8 Dec 05

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. Rated critical seve
CVE-2023-33045 CRITICAL
9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity
CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
CVE-2023-33028 CRITICAL
9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln
CVE-2023-24855 CRITICAL
9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s
CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-28562 CRITICAL
9.8 Sep 05

Memory corruption while handling payloads from remote ESL. Rated critical severity (CVSS 9.8), this vulnerability is rem
CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

Same weakness CWE-416 – Use After Free

View all
CVE-2019-0708 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2009-4324 HIGH POC
7.8
CVE-2015-0313 CRITICAL POC
9.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2013-2551 HIGH POC
8.8

Same technique Use After Free

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2009-4324 HIGH POC
7.8
CVE-2015-0313 CRITICAL POC
9.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2013-2551 HIGH POC
8.8
CVE-2012-4969 HIGH POC
8.1

Share

EUVD-2024-54638 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy