← CVE Intelligence

CVE-2024-45555

Integer Overflow to Buffer Overflow in Automotive OS Platform PUBLISHED

Description (CNA)

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Affected (CNA)

Vendor / productVersions
Qualcomm, Inc. / Snapdragonaffected MSM8996AU; affected QAM8255P; affected QAM8295P; affected QAM8620P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA6564A; affected QCA6564AU; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA7255P; affected SA7775P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8540P; affected SA8620P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected Snapdragon 820 Automotive Platform; affected SRV1H; affected SRV1L; affected SRV1M

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.