Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-45555

Integer Overflow to Buffer Overflow in Automotive OS Platform

Description

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • MSM8996AUaffected
  • QAM8255Paffected
  • QAM8295Paffected
  • QAM8620Paffected
  • QAM8650Paffected
  • QAM8775Paffected
  • QAMSRV1Haffected
  • QAMSRV1Maffected
  • QCA6564Aaffected
  • QCA6564AUaffected
  • QCA6574Aaffected
  • QCA6574AUaffected
  • QCA6584AUaffected
  • QCA6595affected
  • QCA6595AUaffected
  • QCA6688AQaffected
  • QCA6696affected
  • QCA6698AQaffected
  • SA6145Paffected
  • SA6150Paffected
  • SA6155affected
  • SA6155Paffected
  • SA7255Paffected
  • SA7775Paffected
  • SA8145Paffected
  • SA8150Paffected
  • SA8155affected
  • SA8155Paffected
  • SA8195Paffected
  • SA8255Paffected
  • SA8295Paffected
  • SA8540Paffected
  • SA8620Paffected
  • SA8650Paffected
  • SA8770Paffected
  • SA8775Paffected
  • SA9000Paffected
  • Snapdragon 820 Automotive Platformaffected
  • SRV1Haffected
  • SRV1Laffected
  • SRV1Maffected

References