CVE-2024-49834: Out-of-bounds Read
Memory corruption while power-up or power-down sequence of the camera sensor.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/opensource/camera-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2025-02-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49834?
CVE-2024-49834 is rated as critical due to the potential for memory corruption during the power-up or power-down sequence of the camera sensor.
How do I fix CVE-2024-49834?
To fix CVE-2024-49834, it is recommended to update to the latest firmware version provided by Qualcomm for affected devices.
Which devices are affected by CVE-2024-49834?
CVE-2024-49834 affects various Qualcomm firmware including csra6620, csra6640, fastconnect 6200, and many others listed in the security advisory.
What type of vulnerability is CVE-2024-49834?
CVE-2024-49834 is categorized as a memory corruption vulnerability that can be exploited in specific operational conditions.
Is there a patch available for CVE-2024-49834?
Yes, Qualcomm has released patches for CVE-2024-49834 in the latest firmware updates for affected devices.