CVE-2024-45555 — HIGH (8.4)

Vulnerability Description

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	Msm8996Au Firmware	-
Qualcomm	Msm8996Au	-
Qualcomm	Qam8255P Firmware	-
Qualcomm	Qam8255P	-
Qualcomm	Qam8295P Firmware	-
Qualcomm	Qam8295P	-
Qualcomm	Qam8620P Firmware	-
Qualcomm	Qam8620P	-
Qualcomm	Qam8650P Firmware	-
Qualcomm	Qam8650P	-
Qualcomm	Qam8775P Firmware	-
Qualcomm	Qam8775P	-
Qualcomm	Qamsrv1H Firmware	-
Qualcomm	Qamsrv1H	-
Qualcomm	Qamsrv1M Firmware	-
Qualcomm	Qamsrv1M	-
Qualcomm	Qca6564A Firmware	-
Qualcomm	Qca6564A	-
Qualcomm	Qca6564Au Firmware	-
Qualcomm	Qca6564Au	-

Related Weaknesses (CWE)

CWE-190 CWE-787

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-Vendor Advisory

FAQ

What is CVE-2024-45555?

CVE-2024-45555 is a vulnerability with a CVSS score of 8.4 (HIGH). Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the...

How severe is CVE-2024-45555?

CVE-2024-45555 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-45555?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Msm8996Au Firmware, Qualcomm Msm8996Au, Qualcomm Qam8255P Firmware, Qualcomm Qam8255P, Qualcomm Qam8295P Firmware.