6.6

CVE-2024-45540

Memory corruption while invoking IOCTL map buffer request from userspace.

Data is provided by the National Vulnerability Database (NVD)
QualcommC-v2x 9150 Firmware Version-
   QualcommC-v2x 9150 Version-
QualcommQam8295p Firmware Version-
   QualcommQam8295p Version-
QualcommQca6174a Firmware Version-
   QualcommQca6174a Version-
QualcommQca6391 Firmware Version-
   QualcommQca6391 Version-
QualcommQca6426 Firmware Version-
   QualcommQca6426 Version-
QualcommQca6436 Firmware Version-
   QualcommQca6436 Version-
QualcommQca6574au Firmware Version-
   QualcommQca6574au Version-
QualcommQca6595au Firmware Version-
   QualcommQca6595au Version-
QualcommQca6678aq Firmware Version-
   QualcommQca6678aq Version-
QualcommQca6688aq Firmware Version-
   QualcommQca6688aq Version-
QualcommQca6696 Firmware Version-
   QualcommQca6696 Version-
QualcommQca6698aq Firmware Version-
   QualcommQca6698aq Version-
QualcommQca9367 Firmware Version-
   QualcommQca9367 Version-
QualcommQca9377 Firmware Version-
   QualcommQca9377 Version-
QualcommQcn9074 Firmware Version-
   QualcommQcn9074 Version-
QualcommQcs410 Firmware Version-
   QualcommQcs410 Version-
QualcommQcs610 Firmware Version-
   QualcommQcs610 Version-
QualcommQsm8250 Firmware Version-
   QualcommQsm8250 Version-
QualcommSa6145p Firmware Version-
   QualcommSa6145p Version-
QualcommSa6150p Firmware Version-
   QualcommSa6150p Version-
QualcommSa6155p Firmware Version-
   QualcommSa6155p Version-
QualcommSa8145p Firmware Version-
   QualcommSa8145p Version-
QualcommSa8150p Firmware Version-
   QualcommSa8150p Version-
QualcommSa8155p Firmware Version-
   QualcommSa8155p Version-
QualcommSa8195p Firmware Version-
   QualcommSa8195p Version-
QualcommSa8295p Firmware Version-
   QualcommSa8295p Version-
QualcommSa8530p Firmware Version-
   QualcommSa8530p Version-
QualcommSa8540p Firmware Version-
   QualcommSa8540p Version-
QualcommSa9000p Firmware Version-
   QualcommSa9000p Version-
QualcommSd865 5g Firmware Version-
   QualcommSd865 5g Version-
QualcommSdx55 Firmware Version-
   QualcommSdx55 Version-
QualcommSw5100 Firmware Version-
   QualcommSw5100 Version-
QualcommSw5100p Firmware Version-
   QualcommSw5100p Version-
QualcommSxr2130 Firmware Version-
   QualcommSxr2130 Version-
QualcommWcd9341 Firmware Version-
   QualcommWcd9341 Version-
QualcommWcd9370 Firmware Version-
   QualcommWcd9370 Version-
QualcommWcd9375 Firmware Version-
   QualcommWcd9375 Version-
QualcommWcd9380 Firmware Version-
   QualcommWcd9380 Version-
QualcommWcd9385 Firmware Version-
   QualcommWcd9385 Version-
QualcommWcn3660b Firmware Version-
   QualcommWcn3660b Version-
QualcommWcn3680b Firmware Version-
   QualcommWcn3680b Version-
QualcommWcn3950 Firmware Version-
   QualcommWcn3950 Version-
QualcommWcn3980 Firmware Version-
   QualcommWcn3980 Version-
QualcommWcn3988 Firmware Version-
   QualcommWcn3988 Version-
QualcommWsa8810 Firmware Version-
   QualcommWsa8810 Version-
QualcommWsa8815 Firmware Version-
   QualcommWsa8815 Version-
QualcommWsa8830 Firmware Version-
   QualcommWsa8830 Version-
QualcommWsa8835 Firmware Version-
   QualcommWsa8835 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.033
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 6.6 1.8 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.