CVE-2024-45579 — Improper Input Validation in Camera Driver

CVE-2024-45579

Improper Input Validation in Camera Driver PUBLISHED

Description (CNA)

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6900; affected FastConnect 7800; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected WCD9380; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8835

CWE

CWE-20

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.