Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2024-23372

Integer Overflow or Wraparound in Graphics

High8.4EPSS 0.13%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Timeline

  1. ID reserved

    By qualcomm

  2. · 6 months later

    Published

  3. · 31 days later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-23372, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.13% · top 97% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected FastConnect 6200
    • affected FastConnect 6700
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected Flight RB5 5G Platform
    • affected QAM8255P
    • affected QAM8295P
    • affected QAM8620P
    • affected QAM8650P
    • affected QAM8775P
    • affected QAMSRV1H
    • affected QAMSRV1M
    • affected QCA6391
    • affected QCA6574
    • affected QCA6574A
    • affected QCA6574AU
    • affected QCA6595
    • affected QCA6595AU
    • affected QCA6678AQ
    • affected QCA6696
    • affected QCA6698AQ
    • affected QCA6797AQ
    • affected QCM4325
    • affected QCM4490
    • affected QCM5430
    • affected QCM6125
    • affected QCM6490
    • affected QCM8550
    • affected QCS4490
    • affected QCS5430
    • affected QCS6125
    • affected QCS6490
    • affected QCS7230
    • affected QCS8250
    • affected QCS8550
    • affected QRB5165N
    • affected Qualcomm Video Collaboration VC1 Platform
    • affected Qualcomm Video Collaboration VC3 Platform
    • affected Qualcomm Video Collaboration VC5 Platform
    • affected Robotics RB5 Platform
    • and 71 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-23372 badge
[![CVE-2024-23372](https://trackcve.app/badge/CVE-2024-23372.svg)](https://trackcve.app/cve/CVE-2024-23372)

Record last updated .