CVE-2024-45583: Use After Free in Secure Processor
Published May 6, 2025
·Updated
Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.
Affected Software
14 affected components
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Remediation
Event History
May 6, 2025
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45583?
CVE-2024-45583 has been classified as a high-severity vulnerability due to the potential for memory corruption.
2
How does CVE-2024-45583 affect devices?
CVE-2024-45583 affects devices running vulnerable Qualcomm firmware, allowing exploitation through specific IOCTL calls.
3
What are the potential impacts of CVE-2024-45583?
The impacts of CVE-2024-45583 may include system instability, data leakage, or unauthorized access to device functionalities.
4
How do I fix CVE-2024-45583?
To fix CVE-2024-45583, users should update their devices with the latest firmware version provided by Qualcomm.
5
Are all Qualcomm devices affected by CVE-2024-45583?
No, only specific Qualcomm firmware versions identified in the vulnerability report are affected by CVE-2024-45583.