CVE-2024-45580 - Vulnerability Details

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00115.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Qualcomm Subscribe	Fastconnect 6900 Subscribe Fastconnect 6900 Firmware Subscribe Fastconnect 7800 Subscribe Fastconnect 7800 Firmware Subscribe Qmp1000 Subscribe Qmp1000 Firmware Subscribe Sdm429w Subscribe Sdm429w Firmware Subscribe Sm8735 Subscribe Sm8735 Firmware Subscribe Sm8750 Subscribe Sm8750 Firmware Subscribe Sm8750p Subscribe Sm8750p Firmware Subscribe Snapdragon 429 Subscribe Snapdragon 429 Firmware Subscribe Snapdragon 8 Gen 3 Subscribe Snapdragon 8 Gen 3 Firmware Subscribe Snapdragon Ar1 Gen 1 Subscribe Snapdragon Ar1 Gen 1 Firmware Subscribe Snapdragon Ar2 Gen 1 Subscribe Snapdragon Ar2 Gen 1 Firmware Subscribe Ssg2115p Subscribe Ssg2115p Firmware Subscribe Ssg2125p Subscribe Ssg2125p Firmware Subscribe Sxr1230p Subscribe Sxr1230p Firmware Subscribe Sxr2230p Subscribe Sxr2230p Firmware Subscribe Sxr2250p Subscribe Sxr2250p Firmware Subscribe Sxr2330p Subscribe Sxr2330p Firmware Subscribe Wcd9378 Subscribe Wcd9378 Firmware Subscribe Wcd9380 Subscribe Wcd9380 Firmware Subscribe Wcd9385 Subscribe Wcd9385 Firmware Subscribe Wcd9390 Subscribe Wcd9390 Firmware Subscribe Wcd9395 Subscribe Wcd9395 Firmware Subscribe Wcn3620 Subscribe Wcn3620 Firmware Subscribe Wcn3660b Subscribe Wcn3660b Firmware Subscribe Wcn3680b Subscribe Wcn3680b Firmware Subscribe Wcn3980 Subscribe Wcn3980 Firmware Subscribe Wcn7750 Subscribe Wcn7750 Firmware Subscribe Wcn7860 Subscribe Wcn7860 Firmware Subscribe Wcn7861 Subscribe Wcn7861 Firmware Subscribe Wcn7880 Subscribe Wcn7880 Firmware Subscribe Wcn7881 Subscribe Wcn7881 Firmware Subscribe Wsa8830 Subscribe Wsa8830 Firmware Subscribe Wsa8832 Subscribe Wsa8832 Firmware Subscribe Wsa8835 Subscribe Wsa8835 Firmware Subscribe Wsa8840 Subscribe Wsa8840 Firmware Subscribe Wsa8845 Subscribe Wsa8845 Firmware Subscribe Wsa8845h Subscribe Wsa8845h Firmware Subscribe

Configuration 1 [-]

AND

cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_6900:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_7800:*:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qmp1000:*:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sdm429w:*:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:qualcomm:sm8735_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sm8735:*:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sm8750:*:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sm8750p:*:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_429_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_429:*:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_8_gen_3_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_8_gen_3:*:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1:*:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_ar2_gen_1:*:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ssg2115p:*:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ssg2125p:*:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr1230p:*:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2230p:*:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2250p:*:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2330p:*:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9378:*:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9380:*:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9385:*:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9390:*:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9395:*:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3620:*:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3660b:*:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3680b:*:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3980:*:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:qualcomm:wcn7750_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7750:*:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7860:*:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7861:*:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7880:*:*:*:*:*:*:*:*

Configuration 31 [-]

AND

cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7881:*:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8830:*:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8832:*:*:*:*:*:*:*:*

Configuration 34 [-]

AND

cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8835:*:*:*:*:*:*:*:*

Configuration 35 [-]

AND

cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8840:*:*:*:*:*:*:*:*

Configuration 36 [-]

AND

cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8845:*:*:*:*:*:*:*:*

Configuration 37 [-]

AND

cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8845h:*:*:*:*:*:*:*:*

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2025-5790	Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

History

Tue, 04 Mar 2025 03:45:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 03 Mar 2025 10:30:00 +0000

Type	Values Removed	Values Added
Description		Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
Title		Use After Free in DSP Service
Weaknesses		CWE-416
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2025-03-03T10:07:30.301Z

Updated: 2026-02-26T19:09:50.431Z

Reserved: 2024-09-02T10:26:15.227Z

Link: CVE-2024-45580

Vulnrichment

Updated: 2025-03-03T12:27:02.790Z

NVD

Status : Analyzed

Published: 2025-03-03T11:15:12.763

Modified: 2026-06-17T07:54:30.380

Link: CVE-2024-45580

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-416

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Projects

JSON object

JSON object

JSON object

JSON object

JSON object