CVE-2024-38422 | Qualcomm Snapdragon Auto up to SA6155 ADSP integer overflow to buffer overflow

A vulnerability has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music and Snapdragon Wearables and classified as critical. Affected by this vulnerability is an unknown functionality of the component ADSP. The manipulation leads to integer overflow to buffer overflow.

This vulnerability is known as CVE-2024-38422. Attacking locally is a requirement. There is no exploit available.

It is recommended to upgrade the affected component.