Information Disclosure Vulnerability in Qualcomm Mailbox Read API
CVE-2024-43063
5.5MEDIUM
Summary
This vulnerability involves an information disclosure issue stemming from the flawed implementation of the mailbox read API in Qualcomm products. When exploited, it allows unauthorized access to sensitive information, potentially leading to data breaches. The security flaw could affect various products that rely on the mailbox read API, underscoring the need for timely updates and comprehensive security practices.
Affected Version(s)
Snapdragon Snapdragon Auto QAM8255P
Snapdragon Snapdragon Auto QAM8295P
Snapdragon Snapdragon Auto QAM8650P
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database