Y2Y2
Explore more on Y2
Public vulnerability disclosure
Investigate in Cyber
Open

CVE-2024-23384

Use After Free in Graphics Linux

publishedCWE-416

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

Technical severity8.4 highCVSS 3.1 · CNA: qualcomm
Published2024-08-05Source updated 2026-11-03
Collected2026-11-032 attributed sources

Fixes and workarounds

No remediation reported in collected sources.

Missing remediation information is not evidence that no patch exists.

Affected products and versions

ProductVersionsAuthority
Snapdragon
Qualcomm, Inc.
Platforms: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables 		FastConnect 6200 (affected)
FastConnect 6700 (affected)
FastConnect 6900 (affected)
FastConnect 7800 (affected)
Flight RB5 5G Platform (affected)
QAM8255P (affected)
QAM8295P (affected)
QAM8620P (affected)
QAM8650P (affected)
QAM8775P (affected)
QAMSRV1H (affected)
QAMSRV1M (affected)
QCA6391 (affected)
QCA6574 (affected)
QCA6574A (affected)
QCA6574AU (affected)
QCA6595 (affected)
QCA6595AU (affected)
QCA6678AQ (affected)
QCA6696 (affected)
QCA6698AQ (affected)
QCA6797AQ (affected)
QCM4325 (affected)
QCM4490 (affected)
QCM5430 (affected)
QCM6125 (affected)
QCM6490 (affected)
QCM8550 (affected)
QCS4490 (affected)
QCS5430 (affected)
QCS6125 (affected)
QCS6490 (affected)
QCS7230 (affected)
QCS8250 (affected)
QCS8550 (affected)
QRB5165N (affected)
Qualcomm Video Collaboration VC1 Platform (affected)
Qualcomm Video Collaboration VC3 Platform (affected)
Qualcomm Video Collaboration VC5 Platform (affected)
Robotics RB5 Platform (affected)
SA6155P (affected)
SA7255P (affected)
SA7775P (affected)
SA8155P (affected)
SA8195P (affected)
SA8255P (affected)
SA8295P (affected)
SA8620P (affected)
SA8650P (affected)
SA8770P (affected)
SA8775P (affected)
SA9000P (affected)
SD 8 Gen1 5G (affected)
SG4150P (affected)
SG8275P (affected)
SM8550P (affected)
Snapdragon 4 Gen 1 Mobile Platform (affected)
Snapdragon 4 Gen 2 Mobile Platform (affected)
Snapdragon 460 Mobile Platform (affected)
Snapdragon 480 5G Mobile Platform (affected)
Snapdragon 480+ 5G Mobile Platform (SM4350-AC) (affected)
Snapdragon 662 Mobile Platform (affected)
Snapdragon 680 4G Mobile Platform (affected)
Snapdragon 685 4G Mobile Platform (SM6225-AD) (affected)
Snapdragon 695 5G Mobile Platform (affected)
Snapdragon 8 Gen 1 Mobile Platform (affected)
Snapdragon 8 Gen 2 Mobile Platform (affected)
Snapdragon 8 Gen 3 Mobile Platform (affected)
Snapdragon 8+ Gen 1 Mobile Platform (affected)
Snapdragon 8+ Gen 2 Mobile Platform (affected)
Snapdragon AR2 Gen 1 Platform (affected)
Snapdragon W5+ Gen 1 Wearable Platform (affected)
SRV1H (affected)
SRV1L (affected)
SRV1M (affected)
SSG2115P (affected)
SSG2125P (affected)
SW5100 (affected)
SW5100P (affected)
SXR1230P (affected)
SXR2230P (affected)
SXR2250P (affected)
TalynPlus (affected)
Vision Intelligence 400 Platform (affected)
WCD9335 (affected)
WCD9341 (affected)
WCD9370 (affected)
WCD9375 (affected)
WCD9380 (affected)
WCD9385 (affected)
WCD9390 (affected)
WCD9395 (affected)
WCN3950 (affected)
WCN3980 (affected)
WCN3988 (affected)
WCN3990 (affected)
WSA8810 (affected)
WSA8815 (affected)
WSA8830 (affected)
WSA8832 (affected)
WSA8835 (affected)
WSA8840 (affected)
WSA8845 (affected)
WSA8845H (affected)
Other versions: unaffected 		CNA: qualcomm
fastconnect_6200_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
fastconnect_6700_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
fastconnect_6900_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
fastconnect_7800_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
flight_rb5_5g_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qam8255p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qam8295p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qam8620p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qam8650p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qam8775p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qamsrv1h_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qamsrv1m_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6391_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6574_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6574a_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6574au_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6595_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6595au_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6678aq_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6696_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6698aq_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qca6797aq_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcm4325_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcm4490_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcm5430_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcm6125_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcm6490_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcm8550_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs4490_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs5430_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs6125_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs6490_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs7230_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs8250_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qcs8550_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qrb5165n_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qualcomm_video_collaboration_vc1_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qualcomm_video_collaboration_vc3_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
qualcomm_video_collaboration_vc5_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
robotics_rb5_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa6155p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa7255p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa7775p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8155p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8195p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8255p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8295p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8620p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8650p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8770p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa8775p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sa9000p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sd_8_gen1_5g_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sg4150p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sg8275p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sm8550p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_4_gen_1_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_4_gen_2_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_460_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_480_5g_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_662_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_680_4g_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_695_5g_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_8_gen_1_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_8_gen_2_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_8_gen_3_mobile_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
snapdragon_ar2_gen_1_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
srv1h_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
srv1l_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
srv1m_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
ssg2115p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
ssg2125p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sw5100_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sw5100p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sxr1230p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sxr2230p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
sxr2250p_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
talynplus_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
vision_intelligence_400_platform_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9335_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9341_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9370_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9375_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9380_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9385_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9390_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcd9395_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcn3950_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcn3980_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcn3988_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wcn3990_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8810_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8815_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8830_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8832_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8835_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8840_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8845_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP
wsa8845h_firmware
qualcomm 		≥ 0; ≤ * (affected, custom)
Other versions: unknown 		ADP: CISA-ADP

Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.

CVSS assessments

Version / scoreVectorAuthority
3.1 / 8.4
high		 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCNA: qualcomm

Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

References

For agents and automation

Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.

Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.

Get an API keyUse x402Connect an agent
Endpoints and access details

https://api.y2.dev/api/v2/cyber/cves
https://api.y2.dev/api/v2/cyber/cves/{cveId}

A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.

For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.

Agent access JSON · OpenAPI · CVE API guide