7.8

CVE-2024-45574

Improper Validation of Array Index in Camera Driver

Memory corruption during array access in Camera kernel due to invalid index from invalid command data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Sdm429w Firmware Version -
   Qualcomm ≫ Sdm429w Version -
Qualcomm ≫ Wcn3620 Firmware Version -
   Qualcomm ≫ Wcn3620 Version -
Qualcomm ≫ Wcn3660b Firmware Version -
   Qualcomm ≫ Wcn3660b Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.014
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
Patch
Vendor Advisory