CVE-2024-53022
Published: 03 March 2025
Description
Memory corruption may occur during communication between primary and guest VM.
Security Summary
CVE-2024-53022 is a memory corruption vulnerability that may occur during communication between the primary and guest virtual machines. It is associated with CWE-20 (Improper Input Validation) and CWE-787 (Out-of-bounds Write), carrying a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affects components detailed in Qualcomm's security documentation.
A local attacker with low privileges can exploit this vulnerability with low complexity and no user interaction required. Successful exploitation enables high-impact consequences, including unauthorized access to confidential data, modification of system integrity, and disruption of availability through memory corruption.
Qualcomm's March 2025 Security Bulletin provides details on affected products, patches, and mitigation guidance, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html.
Details
- CWE(s)