First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-45560

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6420; QCA6430; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8380XP; SDM429W; Snapdragon 429 Mobile Platform; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform (SC8180X-AA, AB)

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.htmlVendor Advisory

Timeline

Published: Feb 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-455617.8Memory corruption while handling IOCTL call from user-space to set latency level.CVE-2024-455627.8Memory corruption during concurrent access to server info object due to unprotected critical field.CVE-2024-455637.8Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.CVE-2024-455647.8Memory corruption during concurrent access to server info object due to incorrect reference count update.CVE-2024-455657.0Memory corruption when blob structure is modified by user-space after kernel verification.CVE-2024-455667.8Memory corruption during concurrent buffer access due to modification of the reference count.CVE-2024-455677.8Memory corruption while encoding JPEG format.CVE-2024-455687.8Memory corruption due to improper bounds check while command handling in camera-kernel driver.CVE-2024-455699.8Memory corruption while parsing the ML IE due to invalid frame content.CVE-2024-45576.5Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, s CVE-2024-455707.8Memory corruption may occur during IO configuration processing when the IO port count is invalid.CVE-2024-455717.8Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.

CVE-2024-45560: High severity, CVSS 7.0 | Vulnix