CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-45555
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-190, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:msm8996au_firmware
- qualcomm:qam8255p_firmware
- qualcomm:qam8295p_firmware
- qualcomm:qam8620p_firmware
- qualcomm:qam8650p_firmware
- qualcomm:qam8775p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6688aq_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:sa6145p_firmware
- qualcomm:sa6150p_firmware
- qualcomm:sa6155_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa7255p_firmware
- qualcomm:sa7775p_firmware
- qualcomm:sa8145p_firmware
- qualcomm:sa8150p_firmware
- qualcomm:sa8155_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sa8195p_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8295p_firmware
- qualcomm:sa8540p_firmware
- qualcomm:sa8620p_firmware
- qualcomm:sa8650p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa8775p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:snapdragon_820_automotive_firmware
- qualcomm:srv1h_firmware
- qualcomm:srv1l_firmware
- qualcomm:srv1m_firmware