CVE-2024-45556 — Improper Access Control for Register Interface in TZ Firmware

Description (CNA)

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6900; affected FastConnect 7800; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5300; affected IPQ5302; affected IPQ5312; affected IPQ5332; affected IPQ9008; affected IPQ9048; affected IPQ9554; affected IPQ9570; affected IPQ9574; affected QCA0000; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8386; affected QCF8000; affected QCF8000SFP; affected QCF8001; affected QCN5124; affected QCN6224; affected QCN6402; affected QCN6412; affected QCN6422; affected QCN6432; affected QCN9000; affected QCN9012; affected QCN9013; affected QCN9024; affected QCN9074; affected QCN9160; affected QCN9274; affected QXM8083; affected SD 8 Gen1 5G; affected SDM429W; affected SDX65M; affected Snapdragon 429 Mobile Platform; affected Snapdragon AR1 Gen 1 Platform; affected Snapdragon AR1 Gen 1 Platform "Luna1"; affected Snapdragon AR2 Gen 1 Platform; affected Snapdragon Wear 4100+ Platform; affected Snapdragon X65 5G Modem-RF System; affected SSG2115P; affected SSG2125P; affected SXR1230P; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WCN3680B; affected WCN3980; affected WSA8830; affected WSA8832; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6900; affected FastConnect 7800; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5300; affected IPQ5302; affected IPQ5312; affected IPQ5332; affected IPQ9008; affected IPQ9048; affected IPQ9554; affected IPQ9570; affected IPQ9574; affected QCA0000; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8386; affected QCF8000; affected QCF8000SFP; affected QCF8001; affected QCN5124; affected QCN6224; affected QCN6402; affected QCN6412; affected QCN6422; affected QCN6432; affected QCN9000; affected QCN9012; affected QCN9013; affected QCN9024; affected QCN9074; affected QCN9160; affected QCN9274; affected QXM8083; affected SD 8 Gen1 5G; affected SDM429W; affected SDX65M; affected Snapdragon 429 Mobile Platform; affected Snapdragon AR1 Gen 1 Platform; affected Snapdragon AR1 Gen 1 Platform "Luna1"; affected Snapdragon AR2 Gen 1 Platform; affected Snapdragon Wear 4100+ Platform; affected Snapdragon X65 5G Modem-RF System; affected SSG2115P; affected SSG2125P; affected SXR1230P; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WCN3680B; affected WCN3980; affected WSA8830; affected WSA8832; affected WSA8835

CWE

CWE-1262

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.