Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-45556 EUVD-2024-54377GHSA-8phc-9jc2-384h

Improper Access Control for Register Interface in TZ Firmware

Published Apr 7, 2025 · Updated Apr 7, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6900, FastConnect 7800, Immersive Home 3210 Platform, Immersive Home 326 Platform, IPQ5300, IPQ5302, IPQ5312, IPQ5332, IPQ9008, IPQ9048, IPQ9554, IPQ9570, IPQ9574, QCA0000, QCA8075, QCA8081, QCA8082, QCA8084, QCA8085, QCA8386, QCF8000, QCF8000SFP, QCF8001, QCN5124, QCN6224, QCN6402, QCN… —

References