CVE-2024-49836

nvd nist

Published: Mar 3, 2025Modified: Mar 6, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: product-security@qualcomm.com (Secondary)

Description

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

Affected (29)

Products: Qualcomm: Fastconnect 6900 Firmware, Fastconnect 7800 Firmware, Qmp1000 Firmware, Sdm429w Firmware, Sm8735 Firmware, Sm8750 Firmware, Sm8750p Firmware, Snapdragon 429 Firmware, Snapdragon 8 Gen 3 Firmware, Sxr2230p Firmware, Sxr2250p Firmware, Wcd9378 Firmware, Wcd9380 Firmware, Wcd9385 Firmware, Wcd9390 Firmware, Wcd9395 Firmware, Wcn3620 Firmware, Wcn3660b Firmware, Wcn7750 Firmware, Wcn7860 Firmware, Wcn7861 Firmware, Wcn7880 Firmware, Wcn7881 Firmware, Wsa8830 Firmware, Wsa8832 Firmware, Wsa8835 Firmware, Wsa8840 Firmware, Wsa8845 Firmware, Wsa8845h Firmware

Qualcomm

29 products

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Snapdragon 429 Firmware

Snapdragon 8 Gen 3 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 6900 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 6900	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qmp1000 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qmp1000	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm429w Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm429w	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8735 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8735	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8750 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8750	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8750p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8750p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 429 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 429	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8 Gen 3 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8 Gen 3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2230p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2230p	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2250p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2250p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9378 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9378	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9380 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9380	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9385 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9385	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9390 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9390	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9395 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9395	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3620 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3620	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3660b Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3660b	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7750 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7750	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7860 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7860	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7861 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7861	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7880 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7880	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7881 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7881	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8830 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8830	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8832 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8832	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8835 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8835	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8840 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8840	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845h Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845h	All versions

Related CWEs

CWE-129

Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

Source: product-security@qualcomm.com

PatchVendor Advisory

Timeline

No history available yet.