Skip to content
OpenAdvisories
High · 8.4 CVE-2024-45555 EUVD-2024-41265GHSA-wmhm-48vh-qjwg

Integer Overflow to Buffer Overflow in Automotive OS Platform

Published Jan 6, 2025 · Updated Feb 28, 2025 · Assigned by qualcomm

Description

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon MSM8996AU, QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6688AQ, QCA6696, QCA6698AQ, SA6145P, SA6150P, SA6155, SA6155P, SA7255P, SA7775P, SA8145P, SA8150P, SA8155, SA8155P, SA8195P, SA8255P, SA8295P,… —

References