CVE-2024-45554

HIGH EPSS 0.5%
Published May 6, 20251y ago ยท Modified Jun 17, 20261w ago
7.0 CVSS 3.1
High
Find Similar
Published May 6, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

Memory corruption during concurrent SSR execution due to race condition on the global maps list.

CVSS Details

Base Score
7.0
Exploitability
1.0
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
0.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 42

VendorProductVersionRange
qualcommfastconnect_6900_firmware*any
qualcommfastconnect_6900*any
qualcommfastconnect_7800_firmware*any
qualcommfastconnect_7800*any
qualcommqca6174a_firmware*any
qualcommqca6174a*any
qualcommsdm429w_firmware*any
qualcommsdm429w*any
qualcommsnapdragon_429_mobile_firmware*any
qualcommsnapdragon_429_mobile*any
qualcommsnapdragon_8_gen_1_mobile_firmware*any
qualcommsnapdragon_8_gen_1_mobile*any
qualcommsnapdragon_888_5g_mobile_firmware*any
qualcommsnapdragon_888_5g_mobile*any
qualcommsnapdragon_888\+_5g_mobile_firmware*any
qualcommsnapdragon_888\+_5g_mobile*any
qualcommsw5100_firmware*any
qualcommsw5100*any
qualcommsw5100p_firmware*any
qualcommsw5100p*any
qualcommsxr2230p_firmware*any
qualcommsxr2230p*any
qualcommsxr2250p_firmware*any
qualcommsxr2250p*any
qualcommwcd9380_firmware*any
qualcommwcd9380*any
qualcommwcd9385_firmware*any
qualcommwcd9385*any
qualcommwcn3620_firmware*any
qualcommwcn3620*any
qualcommwcn3660b_firmware*any
qualcommwcn3660b*any
qualcommwcn3980_firmware*any
qualcommwcn3980*any
qualcommwcn3988_firmware*any
qualcommwcn3988*any
qualcommwsa8830_firmware*any
qualcommwsa8830*any
qualcommwsa8832_firmware*any
qualcommwsa8832*any
qualcommwsa8835_firmware*any
qualcommwsa8835*any

References 1

  • docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
    PatchVendor Advisory

Remediation

  • docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
    PatchVendor Advisory