Search/CVE-2024-21463
● CVE — High

CVE-2024-21463

VendorqualcommProductqca6174a firmware, qca6574 firmware, qca6574au firmware, qca6584au firmware, qca8081 firmware, ar8035 firmware, qca6574a firmware, qca6595 firmware, qca6595au firmware, qca6696 firmware, qca8337 firmware, qam8295p firmware, qcc710 firmware, qca6698aq firmware, qam8255p firmware, qca6797aq firmware, qam8650p firmware, qam8775p firmware, fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 6200 firmware, fastconnect 7800 firmware, qamsrv1h firmware, qca6678aq firmware, qamsrv1m firmwareDiscoveredApr 1, 2024UpdatedJan 13, 2025

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

CVSS v3.1
7.3 HIGH
EPSS
0.29%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Connections
26 relationships
Timeline
disclosure → media coverage
Apr 1, 2024
Disclosure — published as a CVE record. · last revised by NVD Jan 13, 2025