CVE-2024-53014
Published: 03 March 2025
Description
Memory corruption may occur while validating ports and channels in Audio driver.
Security Summary
CVE-2024-53014 is a memory corruption vulnerability that may occur while validating ports and channels in the Audio driver. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is linked to CWE-129 (Improper Validation of Array Index). The issue was published on 2025-03-03.
A local attacker with low privileges can exploit the vulnerability through low-complexity means with no user interaction required. Exploitation leads to high impacts on confidentiality, integrity, and availability.
Qualcomm's March 2025 Security Bulletin provides details on mitigation, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html.
Details
- CWE(s)