CVE-2024-21462 — Buffer Over-read in INC Snapdragon

CWE-126 — Buffer Over-read2 documents2 sources
Severity
7.1HIGHCNA
No vector
EPSS
0.1%
top 76.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm INC SnapdragonGoogle Android
Timeline
PublishedJul 1

Description

Buffer Over-read in TZ Secure OS Transient DOS while loading the TA ELF file.

Affected Packages2 packages

▶CVEListV5qualcomm_inc/snapdragon306 versions+305

🔴Vulnerability Details

1
CVEList
Buffer Over-read in TZ Secure OS↗2024-07-01
▶

📋Vendor Advisories

1
Android
CVE-2024-21462: Closed-source component↗2024-07-01
▶