Memory Corruption Vulnerability in Qualcomm Products
CVE-2024-49842

7.8HIGH

Key Information:

Vendor
Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 May 2025

Summary

This vulnerability involves memory corruption occurring during the memory mapping process into protected virtual machine address space. The root cause is linked to insufficient restrictions in the API, which can potentially allow unauthorized access or manipulation of memory. This issue emphasizes the importance of proper API handling to maintain the integrity of the address space in virtual environments.

Affected Version(s)

Snapdragon Snapdragon Auto AQT1000

Snapdragon Snapdragon Auto AR8035

Snapdragon Snapdragon Auto FastConnect 6200

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.