First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-45540

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

Memory corruption while invoking IOCTL map buffer request from userspace.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	C-V2X 9150; FastConnect 6200; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6174A; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA9367; QCA9377; QCN9074; QCS410

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.htmlVendor Advisory

Timeline

Published: Apr 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-455417.8Memory corruption when IOCTL call is invoked from user-space to read board data.CVE-2024-455427.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2024-455436.6Memory corruption while accessing MSM channel map and mixer functions.CVE-2024-455446.6Memory corruption while processing IOCTL calls to add route entry in the HW.CVE-2024-455467.8Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.CVE-2024-455477.8Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.CVE-2024-455487.8Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.CVE-2024-455497.7Information disclosure while creating MQ channels.CVE-2024-45557.5Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This is CVE-2024-455507.8Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.CVE-2024-455516.2Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, pote CVE-2024-455528.2Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC stand

CVE-2024-45540: Medium severity, CVSS 6.6 | Vulnix