First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-45584

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822 CWE-119

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6200; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6174A; QCA6391; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6678AQ

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Feb 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-455868.8This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Tradin CVE-2024-455878.8This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transacti CVE-2024-455888.1This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preferenc CVE-2024-455895.9RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote at CVE-2024-45596.5Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption v CVE-2024-455907.5body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malic CVE-2024-455915.3XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The e CVE-2024-455926.1auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6,CVE-2024-455938.8Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft CVE-2024-455945.4Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS CVE-2024-455959.8D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attacke CVE-2024-455966.5Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last auth

CVE-2024-45584: High severity, CVSS 7.8 | Vulnix