CVE-2024-45546: Buffer Over-read in WLAN Windows Host
Published Jan 6, 2025
·Updated
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
Affected Software
20 affected components
All of the following
QUALCOMM Fastconnect 6900 Firmware
QUALCOMM Fastconnect 6900
All of the following
QUALCOMM Fastconnect 7800 Firmware
QUALCOMM Fastconnect 7800
All of the following
QUALCOMM Qcc2073 Firmware
QUALCOMM Qcc2073
All of the following
QUALCOMM Qcc2076 Firmware
QUALCOMM Qcc2076
All of the following
QUALCOMM Sc8380xp Firmware
QUALCOMM Sc8380xp
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
QUALCOMM Wsa8840 Firmware
QUALCOMM Wsa8840
All of the following
QUALCOMM Wsa8845 Firmware
QUALCOMM Wsa8845
All of the following
QUALCOMM Wsa8845h Firmware
QUALCOMM Wsa8845h
Event History
Jan 6, 2025
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45546?
CVE-2024-45546 has a high severity due to memory corruption vulnerabilities in FIPS encryption or decryption IOCTL calls.
2
How do I fix CVE-2024-45546?
To mitigate CVE-2024-45546, update your Qualcomm Fastconnect firmware to the latest version provided by the manufacturer.
3
What devices are affected by CVE-2024-45546?
CVE-2024-45546 affects several Qualcomm firmware products, including Fastconnect 6900, Fastconnect 7800, and Qcc2073.
4
What kind of vulnerability is CVE-2024-45546?
CVE-2024-45546 is classified as a memory corruption vulnerability that can be exploited through user-space IOCTL calls.
5
Are all Qualcomm devices vulnerable to CVE-2024-45546?
Not all Qualcomm devices are vulnerable; only specific firmware versions, such as those for Fastconnect and Qcc series, are impacted.