CVE-2024-45553: Use After Free in DSP Services
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2025-01-05 - Upgrade
Upgrade
android/platform/vendor/qcom/opensource/dsp-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2025-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45553?
CVE-2024-45553 is classified as a medium severity vulnerability due to the potential for memory corruption.
How do I fix CVE-2024-45553?
To fix CVE-2024-45553, apply the latest firmware updates provided by Qualcomm and monitor for security patches.
Which software is affected by CVE-2024-45553?
CVE-2024-45553 affects various Qualcomm firmware products, including Qualcomm Snapdragon and other related devices.
What are the consequences of CVE-2024-45553?
Exploiting CVE-2024-45553 may lead to system instability and unexpected behavior due to memory corruption.
Is there a workaround for CVE-2024-45553?
Currently, the best workaround for CVE-2024-45553 is to implement temporary restrictions on the use of vulnerable features until a patch is applied.