Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-43051 EUVD-2025-5788GHSA-p653-p8p8-pw6m

Improper Authorization in SPS-HLOS

Published Mar 3, 2025 · Updated Mar 3, 2025 · Assigned by qualcomm

Description

Information disclosure while deriving keys for a session for any Widevine use case.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8031, AR8035, C-V2X 9150, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6174A, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA… —

Advisories 2

References