CVE-2024-21482

Summary

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image.

Affected Software

VendorProductVersion RangeStatus
Qualcomm, Inc.SnapdragonCSR8811affected
Qualcomm, Inc.SnapdragonImmersive Home 214 Platformaffected
Qualcomm, Inc.SnapdragonImmersive Home 216 Platformaffected
Qualcomm, Inc.SnapdragonImmersive Home 316 Platformaffected
Qualcomm, Inc.SnapdragonImmersive Home 318 Platformaffected
Qualcomm, Inc.SnapdragonImmersive Home 3210 Platformaffected
Qualcomm, Inc.SnapdragonImmersive Home 326 Platformaffected
Qualcomm, Inc.SnapdragonIPQ5010affected
Qualcomm, Inc.SnapdragonIPQ5028affected
Qualcomm, Inc.SnapdragonIPQ5302affected
Qualcomm, Inc.SnapdragonIPQ5312affected
Qualcomm, Inc.SnapdragonIPQ5332affected
Qualcomm, Inc.SnapdragonIPQ6000affected
Qualcomm, Inc.SnapdragonIPQ6010affected
Qualcomm, Inc.SnapdragonIPQ6018affected
Qualcomm, Inc.SnapdragonIPQ6028affected
Qualcomm, Inc.SnapdragonIPQ8070Aaffected
Qualcomm, Inc.SnapdragonIPQ8071Aaffected
Qualcomm, Inc.SnapdragonIPQ8072Aaffected
Qualcomm, Inc.SnapdragonIPQ8074Aaffected
Qualcomm, Inc.SnapdragonIPQ8076affected
Qualcomm, Inc.SnapdragonIPQ8076Aaffected
Qualcomm, Inc.SnapdragonIPQ8078affected
Qualcomm, Inc.SnapdragonIPQ8078Aaffected
Qualcomm, Inc.SnapdragonIPQ8173affected
Qualcomm, Inc.SnapdragonIPQ8174affected
Qualcomm, Inc.SnapdragonIPQ9008affected
Qualcomm, Inc.SnapdragonIPQ9554affected
Qualcomm, Inc.SnapdragonIPQ9570affected
Qualcomm, Inc.SnapdragonIPQ9574affected
Qualcomm, Inc.SnapdragonQCA4024affected
Qualcomm, Inc.SnapdragonQCA8075affected
Qualcomm, Inc.SnapdragonQCA8081affected
Qualcomm, Inc.SnapdragonQCA8082affected
Qualcomm, Inc.SnapdragonQCA8084affected
Qualcomm, Inc.SnapdragonQCA8085affected
Qualcomm, Inc.SnapdragonQCA8386affected
Qualcomm, Inc.SnapdragonQCA9888affected
Qualcomm, Inc.SnapdragonQCA9889affected
Qualcomm, Inc.SnapdragonQCF8000affected
Qualcomm, Inc.SnapdragonQCF8001affected
Qualcomm, Inc.SnapdragonQCN5022affected
Qualcomm, Inc.SnapdragonQCN5024affected
Qualcomm, Inc.SnapdragonQCN5052affected
Qualcomm, Inc.SnapdragonQCN5122affected
Qualcomm, Inc.SnapdragonQCN5124affected
Qualcomm, Inc.SnapdragonQCN5152affected
Qualcomm, Inc.SnapdragonQCN5154affected
Qualcomm, Inc.SnapdragonQCN5164affected
Qualcomm, Inc.SnapdragonQCN6023affected
Qualcomm, Inc.SnapdragonQCN6024affected
Qualcomm, Inc.SnapdragonQCN6112affected
Qualcomm, Inc.SnapdragonQCN6122affected
Qualcomm, Inc.SnapdragonQCN6132affected
Qualcomm, Inc.SnapdragonQCN6402affected
Qualcomm, Inc.SnapdragonQCN6412affected
Qualcomm, Inc.SnapdragonQCN6422affected
Qualcomm, Inc.SnapdragonQCN6432affected
Qualcomm, Inc.SnapdragonQCN9000affected
Qualcomm, Inc.SnapdragonQCN9022affected
Qualcomm, Inc.SnapdragonQCN9024affected
Qualcomm, Inc.SnapdragonQCN9070affected
Qualcomm, Inc.SnapdragonQCN9072affected
Qualcomm, Inc.SnapdragonQCN9074affected
Qualcomm, Inc.SnapdragonQCN9100affected
Qualcomm, Inc.SnapdragonQCN9274affected
Qualcomm, Inc.SnapdragonSDX55affected
Qualcomm, Inc.SnapdragonSDX65Maffected
Qualcomm, Inc.SnapdragonSnapdragon X65 5G Modem-RF Systemaffected

Weaknesses

  • CWE-119: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References