← Back

CVE-2024-45574

nvd nist
Published: May 6, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: product-security@qualcomm.com (Secondary)

Description

Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

Affected (4)

Qualcomm
4 products
Sdm429w Firmware
Snapdragon 429 Mobile Firmware
Wcn3620 Firmware
Wcn3660b Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sdm429w Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sdm429w
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Snapdragon 429 Mobile Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Snapdragon 429 Mobile
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wcn3620 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wcn3620
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wcn3660b Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Wcn3660b
All versions

Related CWEs

CWE-129
Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (1)

Source: product-security@qualcomm.com
PatchVendor Advisory

Timeline

No history available yet.