CVE-2024-45555

Katalog CVE

CVSS 7.8 · High EPSS 0,14%

Kerentanan Out-of-bounds Write pada qualcomm msm8996au firmware, qualcomm qam8255p firmware +39 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Rincian

Terbit di NVD

6 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html advisory vendor