Information Disclosure Vulnerability in Qualcomm Mailbox Read API
CVE-2024-43063

5.5MEDIUM

Key Information:

Vendor
Qualcomm
Vendor
CVE Published:
6 January 2025

Summary

This vulnerability involves an information disclosure issue stemming from the flawed implementation of the mailbox read API in Qualcomm products. When exploited, it allows unauthorized access to sensitive information, potentially leading to data breaches. The security flaw could affect various products that rely on the mailbox read API, underscoring the need for timely updates and comprehensive security practices.

Affected Version(s)

Snapdragon Snapdragon Auto QAM8255P

Snapdragon Snapdragon Auto QAM8295P

Snapdragon Snapdragon Auto QAM8650P

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.