First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-45558

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ6000; IPQ6010; IPQ6018

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Jan 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-455595.5Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.CVE-2024-45567.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access CVE-2024-455607.0Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.CVE-2024-455617.8Memory corruption while handling IOCTL call from user-space to set latency level.CVE-2024-455627.8Memory corruption during concurrent access to server info object due to unprotected critical field.CVE-2024-455637.8Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.CVE-2024-455647.8Memory corruption during concurrent access to server info object due to incorrect reference count update.CVE-2024-455657.0Memory corruption when blob structure is modified by user-space after kernel verification.CVE-2024-455667.8Memory corruption during concurrent buffer access due to modification of the reference count.CVE-2024-455677.8Memory corruption while encoding JPEG format.CVE-2024-455687.8Memory corruption due to improper bounds check while command handling in camera-kernel driver.CVE-2024-455699.8Memory corruption while parsing the ML IE due to invalid frame content.

CVE-2024-45558: High severity, CVSS 7.5 | Vulnix