CVE-2024-45580

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-455817.8Memory corruption while sound model registration for voice activation with audio kernel driver.CVE-2024-455827.8Memory corruption while validating number of devices in Camera kernel .CVE-2024-455837.8Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.CVE-2024-455847.8Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.CVE-2024-455868.8This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile TradinCVE-2024-455878.8This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the TransactiCVE-2024-455888.1This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the PreferencCVE-2024-455895.9RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote atCVE-2024-45596.5Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption vCVE-2024-455907.5body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicCVE-2024-455915.3XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The eCVE-2024-455926.1auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6,
CVE-2024-45580: High severity, CVSS 7.8 | Vulnix