First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-45556

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6900; FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ9008; IPQ9048; IPQ9554; IPQ9570; IPQ9574; QCA0000; QCA8075; QCA8081; QCA8082; QCA8084; QCA8085; QCA8386

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.htmlVendor Advisory

Timeline

Published: Apr 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-455577.8Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.CVE-2024-455587.5Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length CVE-2024-455595.5Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.CVE-2024-45567.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access CVE-2024-455607.0Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.CVE-2024-455617.8Memory corruption while handling IOCTL call from user-space to set latency level.CVE-2024-455627.8Memory corruption during concurrent access to server info object due to unprotected critical field.CVE-2024-455637.8Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.CVE-2024-455647.8Memory corruption during concurrent access to server info object due to incorrect reference count update.CVE-2024-455657.0Memory corruption when blob structure is modified by user-space after kernel verification.CVE-2024-455667.8Memory corruption during concurrent buffer access due to modification of the reference count.CVE-2024-455677.8Memory corruption while encoding JPEG format.

CVE-2024-45556: Medium severity, CVSS 6.5 | Vulnix