CVE-2024-49832
Published: 03 February 2025
Description
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
Security Summary
CVE-2024-49832 is a memory corruption vulnerability in the Camera component, caused by an unusually high number of nodes passed to the AXI port. It is associated with CWE-129 (Improper Validation of Array Index) and carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability was published on 2025-02-03.
A local attacker with low privileges can exploit this issue through low-complexity attacks requiring no user interaction. Successful exploitation enables high-impact consequences, including unauthorized disclosure of information, modification of data, and denial of service.
Qualcomm's February 2025 security bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html, details affected products and recommended mitigations or patches.
Details
- CWE(s)