CVE-2024-45582
Published: 03 February 2025
Description
Memory corruption while validating number of devices in Camera kernel .
Security Summary
CVE-2024-45582 is a memory corruption vulnerability that occurs while validating the number of devices in the Camera kernel. It is linked to CWE-129 (Improper Validation of Array Index) and affects Qualcomm components, as documented in their security resources.
The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). A local attacker with low privileges can exploit it through low-complexity means without user interaction, potentially achieving high impacts on confidentiality, integrity, and availability, such as full system compromise via memory corruption.
Qualcomm's February 2025 security bulletin provides details on affected products and mitigation: https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html.
Details
- CWE(s)