CVE-2024-53012

CVE-2024-53012 is a memory corruption vulnerability stemming from improper input validation (CWE-20) in the clock device, potentially leading to out-of-bounds writes (CWE-787). It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and was published on 2025-03-03. The vulnerability affects components in Qualcomm products, as referenced in their security documentation.

A local attacker with low privileges can exploit this issue with low attack complexity and no user interaction required. Successful exploitation may result in high impacts to confidentiality, integrity, and availability, such as arbitrary code execution or system crashes through memory corruption in the clock device.

Qualcomm's March 2025 security bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html) details affected products and provides guidance on patches and mitigations for this vulnerability.