CVE-2024-45578: Improper Validation of Array Index in Camera Driver
Published May 6, 2025
·Updated
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
Affected Software
28 affected components
All of the following
QUALCOMM Fastconnect 6900 Firmware
QUALCOMM Fastconnect 6900
All of the following
QUALCOMM Fastconnect 7800 Firmware
QUALCOMM Fastconnect 7800
All of the following
QUALCOMM Sdm429w Firmware
QUALCOMM Sdm429w
All of the following
QUALCOMM Snapdragon 429 Mobile Firmware
QUALCOMM Snapdragon 429 Mobile
All of the following
Qualcomm Snapdragon 8 Gen 1 Mobile Firmware
QUALCOMM Snapdragon 8 Gen 1 Mobile
All of the following
QUALCOMM Sxr2230p Firmware
QUALCOMM Sxr2230p
All of the following
QUALCOMM Sxr2250p Firmware
QUALCOMM Sxr2250p
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
QUALCOMM Wcn3620 Firmware
QUALCOMM Wcn3620
All of the following
Qualcomm Wcn3660b Firmware
QUALCOMM Wcn3660b
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
QUALCOMM Wsa8832 Firmware
QUALCOMM Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Remediation
Event History
May 6, 2025
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45578?
CVE-2024-45578 is categorized as a high-severity vulnerability due to potential memory corruption issues.
2
How do I fix CVE-2024-45578?
To fix CVE-2024-45578, you should update your firmware to the latest version provided by Qualcomm.
3
What software is affected by CVE-2024-45578?
CVE-2024-45578 affects Qualcomm FastConnect 6900, FastConnect 7800, and other specific Qualcomm firmware components.
4
What are the risks associated with CVE-2024-45578?
The risks associated with CVE-2024-45578 include potential exploitation leading to system crashes or unauthorized access.
5
Is CVE-2024-45578 a remote vulnerability?
Yes, CVE-2024-45578 can potentially be exploited remotely due to its nature in memory corruption during IOCTL operations.