CVE-2024-38420

Q: What is the severity of CVE-2024-38420?

CVE-2024-38420 has a CVSS score of 8.8 (HIGH). This vulnerability allows memory corruption when configuring a hypervisor-based input virtual device, potentially enabling arbitrary code execution or system compromise. It affects systems using Qualcomm hypervisor technology with vulnerable firmware versions.

8.8 HIGH

📋 TL;DR

This vulnerability allows memory corruption when configuring a hypervisor-based input virtual device, potentially enabling arbitrary code execution or system compromise. It affects systems using Qualcomm hypervisor technology with vulnerable firmware versions.

💻 Affected Systems

Products:

Qualcomm hypervisor implementations

Versions: Specific versions not detailed in reference; check Qualcomm February 2025 bulletin for exact affected versions

Operating Systems: Systems using Qualcomm hypervisor technology

Default Config Vulnerable: ⚠️ Yes

Notes: Requires ability to configure hypervisor input virtual devices; typically affects embedded/IoT systems, automotive, and mobile platforms using Qualcomm chipsets with hypervisor functionality.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Full system compromise allowing attacker to execute arbitrary code at hypervisor level, potentially escaping guest VMs and compromising the host system.

🟠

Likely Case

Denial of service through system crashes or instability, with potential for limited code execution within the hypervisor context.

🟢

If Mitigated

Limited impact if proper isolation and access controls prevent unauthorized configuration attempts.

🌐 Internet-Facing: LOW - Requires local access or ability to configure hypervisor devices, unlikely to be directly internet-exposed.

🏢 Internal Only: MEDIUM - Could be exploited by malicious insiders or compromised internal systems with hypervisor access.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires hypervisor configuration privileges; memory corruption vulnerabilities can be complex to exploit reliably but pose significant risk if successfully weaponized.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm February 2025 security bulletin for specific patched versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html

Restart Required: No

Instructions:

1. Review Qualcomm February 2025 security bulletin. 2. Identify affected firmware versions. 3. Apply vendor-provided firmware updates. 4. Verify update completion and system stability.

🔧 Temporary Workarounds

Restrict hypervisor configuration access

all

Limit which users/processes can configure hypervisor virtual devices to reduce attack surface

Disable unnecessary virtual devices

all

Disable hypervisor-based input virtual devices that are not required for system operation

🧯 If You Can't Patch

Implement strict access controls to prevent unauthorized hypervisor configuration
Monitor for abnormal hypervisor configuration attempts and system crashes

🔍 How to Verify

Check if Vulnerable:

Check firmware version against Qualcomm's affected versions list in February 2025 bulletin

Check Version:

System-specific command to check Qualcomm firmware/hypervisor version (varies by device/platform)

Verify Fix Applied:

Verify firmware version matches patched version from Qualcomm bulletin and test hypervisor configuration functionality

📡 Detection & Monitoring

Log Indicators:

Hypervisor configuration errors
System crashes during device configuration
Memory access violations in hypervisor logs

Network Indicators:

Unusual hypervisor management traffic patterns

SIEM Query:

Search for hypervisor configuration events followed by system crashes or memory violation alerts

📊 Metadata

CVE ID: CVE-2024-38420

CVSS v3 Score: 8.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE: CWE-20

EPSS Score: 0.04% exploit probability (9.7th percentile)

Published: February 3, 2025

Last Updated: February 5, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Aqt1000 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6335 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6431 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6564a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn9274 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qcs9100 Firmware by Qualcomm

Qdu1000 Firmware by Qualcomm

Qdu1010 Firmware by Qualcomm

Qdu1110 Firmware by Qualcomm

Qdu1210 Firmware by Qualcomm

Qdx1010 Firmware by Qualcomm

Qdx1011 Firmware by Qualcomm

Qep8111 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qru1032 Firmware by Qualcomm

Qru1052 Firmware by Qualcomm

Qru1062 Firmware by Qualcomm

Qsm8350 Firmware by Qualcomm

Robotics Rb3 Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6155 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155 Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8540p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm