Skip to content
OpenAdvisories
Medium · 6.2 CVE-2024-45551 EUVD-2024-54379GHSA-hf9p-447v-5g26

Weak Authentication in HLOS

Published Apr 7, 2025 · Updated Apr 7, 2025 · Assigned by qualcomm

Description

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6174A, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA65… —

Advisories 1

References