CVE-2024-45553

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6174A; QCA6391; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Jan 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-455547.0Memory corruption during concurrent SSR execution due to race condition on the global maps list.CVE-2024-455557.8Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs CVE-2024-455566.5Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.CVE-2024-455577.8Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.CVE-2024-455587.5Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length CVE-2024-455595.5Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.CVE-2024-45567.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access CVE-2024-455607.0Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.CVE-2024-455617.8Memory corruption while handling IOCTL call from user-space to set latency level.CVE-2024-455627.8Memory corruption during concurrent access to server info object due to unprotected critical field.CVE-2024-455637.8Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.CVE-2024-455647.8Memory corruption during concurrent access to server info object due to incorrect reference count update.