CVE-2024-45554 — Use After Free in DSP Service

Description (CNA)

Memory corruption during concurrent SSR execution due to race condition on the global maps list.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6900; affected FastConnect 7800; affected QCA6174A; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 888 5G Mobile Platform; affected Snapdragon 888+ 5G Mobile Platform (SM8350-AC); affected SW5100; affected SW5100P; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WCN3980; affected WCN3988; affected WSA8830; affected WSA8832; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6900; affected FastConnect 7800; affected QCA6174A; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 888 5G Mobile Platform; affected Snapdragon 888+ 5G Mobile Platform (SM8350-AC); affected SW5100; affected SW5100P; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WCN3980; affected WCN3988; affected WSA8830; affected WSA8832; affected WSA8835

CWE

CWE-416

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.