Skip to content
OpenAdvisories
High · 7.8 CVE-2024-45584 EUVD-2024-41760GHSA-pjcf-x483-vp8v

Untrusted Pointer Dereference in Automotive Android OS

Published Feb 3, 2025 · Updated Feb 3, 2025 · Assigned by qualcomm

Description

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, FastConnect 6200, FastConnect 6900, FastConnect 7800, QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6174A, QCA6391, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6678AQ, QCA6688AQ, QCA6696, QCA6698AQ, QCA6797AQ, QCA8081, QCA8337, QCC710, QCM4325,… —

References