CVE-2024-23381

Q: What is the severity of CVE-2024-23381?

CVE-2024-23381 has a CVSS score of 8.4 (HIGH). This vulnerability involves memory corruption when GPU SMMU fails to unmap memory mapped in a Vertex Buffer Object (VBO), potentially allowing attackers to execute arbitrary code or cause denial of service. It affects devices with Qualcomm GPUs that use the vulnerable SMMU implementation. This primarily impacts mobile devices, IoT devices, and embedded systems using affected Qualcomm chipsets.

8.4 HIGH

📋 TL;DR

This vulnerability involves memory corruption when GPU SMMU fails to unmap memory mapped in a Vertex Buffer Object (VBO), potentially allowing attackers to execute arbitrary code or cause denial of service. It affects devices with Qualcomm GPUs that use the vulnerable SMMU implementation. This primarily impacts mobile devices, IoT devices, and embedded systems using affected Qualcomm chipsets.

💻 Affected Systems

Products:

Qualcomm Adreno GPU-based devices
Smartphones with Qualcomm Snapdragon processors
IoT devices with Qualcomm chipsets
Embedded systems using Qualcomm GPUs

Versions: Specific affected versions not publicly detailed; refer to Qualcomm August 2024 security bulletin for chipset-specific information

Operating Systems: Android, Linux-based systems with Qualcomm GPU drivers

Default Config Vulnerable: ⚠️ Yes

Notes: Vulnerability is in GPU SMMU hardware/firmware layer; exploitation requires specific GPU operations and memory mapping patterns.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Full system compromise allowing arbitrary code execution with kernel privileges, potentially leading to complete device takeover, data exfiltration, or persistent backdoor installation.

🟠

Likely Case

Local privilege escalation from user to kernel space, application crashes, or denial of service affecting GPU functionality and system stability.

🟢

If Mitigated

Limited impact with proper isolation and sandboxing, potentially causing only application crashes without privilege escalation.

🌐 Internet-Facing: LOW - Requires local access to exploit; not directly exploitable over network interfaces.

🏢 Internal Only: MEDIUM - Could be exploited by malicious apps or users with local access, potentially leading to privilege escalation within the device.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires detailed knowledge of GPU memory management and SMMU operations; likely requires local access and specific GPU operations to trigger.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm August 2024 security bulletin for specific chipset firmware updates

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for security updates
2. Apply Qualcomm-provided firmware updates for affected chipsets
3. Update GPU drivers to patched versions
4. Reboot device after update installation

🔧 Temporary Workarounds

Restrict GPU access

all

Limit applications with GPU access to trusted sources only and implement strict sandboxing

Monitor GPU operations

linux

Implement monitoring for abnormal GPU memory operations and SMMU access patterns

🧯 If You Can't Patch

Implement strict application sandboxing and privilege separation
Monitor for abnormal GPU memory usage patterns and system crashes

🔍 How to Verify

Check if Vulnerable:

Check device chipset against Qualcomm August 2024 security bulletin; examine GPU driver and firmware versions

Check Version:

For Android: 'getprop ro.boot.hardware' and 'getprop ro.build.version.security_patch'; For Linux: check GPU driver version in system logs

Verify Fix Applied:

Verify GPU firmware and driver versions match patched versions specified in Qualcomm advisory

📡 Detection & Monitoring

Log Indicators:

GPU driver crashes
SMMU fault errors in kernel logs
Abnormal memory mapping/unmapping patterns
System crashes during GPU-intensive operations

SIEM Query:

source="kernel" AND ("GPU fault" OR "SMMU error" OR "memory corruption")

📊 Metadata

CVE ID: CVE-2024-23381

CVSS v3 Score: 8.4 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

Published: August 5, 2024

Last Updated: November 26, 2024

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480\+ 5g Mobile Platform \(sm4350 Ac\) Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon W5\+ Gen 1 Wearable Platform Firmware by Qualcomm

Srv1h Firmware by Qualcomm

Srv1l Firmware by Qualcomm

Srv1m Firmware by Qualcomm

Sw5100 Firmware by Qualcomm

Sw5100p Firmware by Qualcomm

Video Collaboration Vc1 Platform Firmware by Qualcomm

Video Collaboration Vc3 Platform Firmware by Qualcomm

Video Collaboration Vc5 Platform Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm

Wcd9390 Firmware by Qualcomm

Wcd9395 Firmware by Qualcomm

Wcn3950 Firmware by Qualcomm

Wcn3980 Firmware by Qualcomm

Wcn3988 Firmware by Qualcomm

Wsa8810 Firmware by Qualcomm

Wsa8815 Firmware by Qualcomm

Wsa8830 Firmware by Qualcomm

Wsa8835 Firmware by Qualcomm

Wsa8840 Firmware by Qualcomm

Wsa8845 Firmware by Qualcomm

Wsa8845h Firmware by Qualcomm

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status