Skip to content
OpenAdvisories
High · 7.8 CVE-2024-45557 EUVD-2024-54376GHSA-4jc9-gj5x-jr9j

Use of Out-of-range Pointer Offset in Trust Management Engine

Published Apr 7, 2025 · Updated Feb 26, 2026 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, FastConnect 6700, FastConnect 6900, FastConnect 7800, QCA6174A, QCA6584AU, QCA6698AQ, QCA8081, QCA8337, QCC710, QCM4490, QCN6224, QCN6274, QCS4490, QDU1000, QDU1010, QDU1110, QDU1210, QDX1010, QDX1011, QEP8111, QFW7114, QFW7124, QRU1032, QRU1052, QRU1062, SC8380XP, SD 8 Gen1 5G, SM8635, Sna… —

References