Memory Corruption Vulnerability in Qualcomm Camera Kernel Driver
CVE-2024-45577

7.8HIGH

Key Information:

Vendor
Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 May 2025

Summary

This vulnerability allows for memory corruption specifically when userspace applications invoke IOCTL calls to the Qualcomm camera kernel driver, potentially leading to unauthorized access and information disclosure. Effective security measures should be implemented to mitigate risks associated with this type of exploitation.

Affected Version(s)

Snapdragon Snapdragon Mobile FastConnect 6900

Snapdragon Snapdragon Mobile FastConnect 7800

Snapdragon Snapdragon Mobile SDM429W

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.