CVE-2024-53032
Published: 03 March 2025
Description
Memory corruption may occur in keyboard virtual device due to guest VM interaction.
Security Summary
CVE-2024-53032 is a memory corruption vulnerability (CWE-367) in the keyboard virtual device triggered by guest VM interactions. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and was published on March 3, 2025. The issue affects components in Qualcomm products, as outlined in their security advisories.
A local attacker with low privileges can exploit this vulnerability due to its low attack complexity and lack of required user interaction. Exploitation leads to memory corruption, enabling high-impact consequences including unauthorized data disclosure, modification, and denial of service within the affected scope.
Qualcomm's March 2025 security bulletin at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html details patches and mitigation guidance for addressing this vulnerability.
Details
- CWE(s)