First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-45549

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Information disclosure while creating MQ channels.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6174A; QCA6391; QCA6421; QCA6426; QCA6431; QCA6436; QCA6574AU; QCA6584AU

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.htmlVendor Advisory

Timeline

Published: Apr 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-45557.5Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This is CVE-2024-455507.8Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.CVE-2024-455516.2Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, pote CVE-2024-455528.2Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC stand CVE-2024-455537.8Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another CVE-2024-455547.0Memory corruption during concurrent SSR execution due to race condition on the global maps list.CVE-2024-455557.8Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs CVE-2024-455566.5Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.CVE-2024-455577.8Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.CVE-2024-455587.5Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length CVE-2024-455595.5Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.CVE-2024-45567.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access

CVE-2024-45549: High severity, CVSS 7.7 | Vulnix