CVE-2024-38418
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
Memory corruption while parsing the memory map info in IOCTL calls.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
Memory corruption while parsing the memory map info in IOCTL calls.
- Record
CVE-2024-38418- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
EUVDEUVD-2024-37113
Memory corruption while parsing the memory map info in IOCTL calls.
- Record
EUVD-2024-37113- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v24x-73f9-v4j3
Memory corruption while parsing the memory map info in IOCTL calls.
Memory corruption while parsing the memory map info in IOCTL calls.
- Record
GHSA-v24x-73f9-v4j3- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
NVD
Memory corruption while parsing the memory map info in IOCTL calls.
- Record
CVE-2024-38418- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
Affected products
- qualcomm c-v2x 9150 firmware
- qualcomm csrb31024 firmware
- qualcomm fastconnect 6800 firmware
- qualcomm fastconnect 6900 firmware
- qualcomm fastconnect 7800 firmware
- qualcomm qam8295p firmware
- qualcomm qca6391 firmware
- qualcomm qca6426 firmware
- qualcomm qca6436 firmware
- qualcomm qca6564au firmware
- qualcomm qca6574au firmware
- qualcomm qca6595au firmware
Show 51 moreShow less
- qualcomm qca6696 firmware
- qualcomm qcn9074 firmware
- qualcomm qcs410 firmware
- qualcomm qcs610 firmware
- qualcomm qsm8250 firmware
- qualcomm sa6145p firmware
- qualcomm sa6150p firmware
- qualcomm sa6155p firmware
- qualcomm sa8145p firmware
- qualcomm sa8150p firmware
- qualcomm sa8155p firmware
- qualcomm sa8195p firmware
- qualcomm sa8295p firmware
- qualcomm sa8530p firmware
- qualcomm sa8540p firmware
- qualcomm sa9000p firmware
- qualcomm sd865 5g firmware
- qualcomm sdm429w firmware
- qualcomm sdx55 firmware
- qualcomm snapdragon 429 mobile firmware
- qualcomm snapdragon 865\+ 5g mobile firmware
- qualcomm snapdragon 865 5g mobile firmware
- qualcomm snapdragon 870 5g mobile firmware
- qualcomm snapdragon 8 gen 1 mobile firmware
- qualcomm snapdragon auto 4g modem firmware
- qualcomm snapdragon w5\+ gen 1 wearable firmware
- qualcomm snapdragon x55 5g modem-rf firmware
- qualcomm snapdragon xr2 5g firmware
- qualcomm sw5100 firmware
- qualcomm sw5100p firmware
- qualcomm sxr2130 firmware
- qualcomm sxr2230p firmware
- qualcomm sxr2250p firmware
- qualcomm video collaboration vc1 platform firmware
- qualcomm video collaboration vc3 platform firmware
- qualcomm wcd9341 firmware
- qualcomm wcd9370 firmware
- qualcomm wcd9380 firmware
- qualcomm wcd9385 firmware
- qualcomm wcn3620 firmware
- qualcomm wcn3660b firmware
- qualcomm wcn3680b firmware
- qualcomm wcn3950 firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3988 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8832 firmware
- qualcomm wsa8835 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-38418 is a high vulnerability (CVSS 7.8) in Qualcomm C-v2x 9150 Firmware, published February 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.07%, the 0th percentile. No source names a fixed version.