5.5

CVE-2024-45559

Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qam8255p Firmware Version -
   Qualcomm ≫ Qam8255p Version -
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p Version -
Qualcomm ≫ Qam8620p Firmware Version -
   Qualcomm ≫ Qam8620p Version -
Qualcomm ≫ Qam8650p Firmware Version -
   Qualcomm ≫ Qam8650p Version -
Qualcomm ≫ Qam8775p Firmware Version -
   Qualcomm ≫ Qam8775p Version -
Qualcomm ≫ Qamsrv1h Firmware Version -
   Qualcomm ≫ Qamsrv1h Version -
Qualcomm ≫ Qamsrv1m Firmware Version -
   Qualcomm ≫ Qamsrv1m Version -
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595 Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Sa7255p Firmware Version -
   Qualcomm ≫ Sa7255p Version -
Qualcomm ≫ Sa7775p Firmware Version -
   Qualcomm ≫ Sa7775p Version -
Qualcomm ≫ Sa8255p Firmware Version -
   Qualcomm ≫ Sa8255p Version -
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p Version -
Qualcomm ≫ Sa8540p Firmware Version -
   Qualcomm ≫ Sa8540p Version -
Qualcomm ≫ Sa8620p Firmware Version -
   Qualcomm ≫ Sa8620p Version -
Qualcomm ≫ Sa8650p Firmware Version -
   Qualcomm ≫ Sa8650p Version -
Qualcomm ≫ Sa8770p Firmware Version -
   Qualcomm ≫ Sa8770p Version -
Qualcomm ≫ Sa8775p Firmware Version -
   Qualcomm ≫ Sa8775p Version -
Qualcomm ≫ Sa9000p Firmware Version -
   Qualcomm ≫ Sa9000p Version -
Qualcomm ≫ Srv1h Firmware Version -
   Qualcomm ≫ Srv1h Version -
Qualcomm ≫ Srv1l Firmware Version -
   Qualcomm ≫ Srv1l Version -
Qualcomm ≫ Srv1m Firmware Version -
   Qualcomm ≫ Srv1m Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
Vendor Advisory