CVE-2024-45547: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Published Jan 6, 2025
·Updated
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
Affected Software
20 affected components
All of the following
QUALCOMM Fastconnect 6900 Firmware
QUALCOMM Fastconnect 6900
All of the following
QUALCOMM Fastconnect 7800 Firmware
QUALCOMM Fastconnect 7800
All of the following
QUALCOMM Qcc2073 Firmware
QUALCOMM Qcc2073
All of the following
QUALCOMM Qcc2076 Firmware
QUALCOMM Qcc2076
All of the following
QUALCOMM Sc8380xp Firmware
QUALCOMM Sc8380xp
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
QUALCOMM Wsa8840 Firmware
QUALCOMM Wsa8840
All of the following
QUALCOMM Wsa8845 Firmware
QUALCOMM Wsa8845
All of the following
QUALCOMM Wsa8845h Firmware
QUALCOMM Wsa8845h
Event History
Jan 6, 2025
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45547?
The severity of CVE-2024-45547 is categorized based on its potential impact on memory corruption in affected Qualcomm firmware.
2
How do I fix CVE-2024-45547?
To fix CVE-2024-45547, upgrade to the latest firmware version provided by Qualcomm that addresses this vulnerability.
3
What software is affected by CVE-2024-45547?
CVE-2024-45547 affects several Qualcomm firmware versions, specifically for Fastconnect 6900, 7800, Qcc2073, Qcc2076, Sc8380xp, Wcd9380, Wcd9385, Wsa8840, Wsa8845, and Wsa8845h.
4
What type of vulnerability is CVE-2024-45547?
CVE-2024-45547 is a memory corruption vulnerability triggered by an IOCTL call from user-space.
5
Is CVE-2024-45547 remotely exploitable?
CVE-2024-45547 requires user-space interaction, which may limit its remote exploitability.