Memory Corruption in Qualcomm's OPE Module Affects Multiple Devices
CVE-2024-45576

7.8HIGH

Key Information:

Vendor
Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 May 2025

Summary

A memory corruption vulnerability exists in Qualcomm's OPE module due to the improper processing of command buffers. This issue can lead to unexpected behavior in affected devices, potentially allowing an attacker to exploit the flaw. It is crucial for users to be aware of this vulnerability and apply necessary patches or updates to maintain device security and integrity.

Affected Version(s)

Snapdragon Snapdragon Compute FastConnect 6900

Snapdragon Snapdragon Compute FastConnect 7800

Snapdragon Snapdragon Compute SDM429W

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.