CVE-2024-45556

Improper Access Control for Register Interface in TZ Firmware

State: Published
Severity: 6.5 Medium
Published: Apr 7, 2025
Updated: Apr 7, 2025
Reserved: Sep 2, 2024

Description

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	qualcomm

Weaknesses

CWE-1262 Improper Access Control for Register Interface

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 6900Affected FastConnect 7800Affected Immersive Home 3210 PlatformAffected Immersive Home 326 PlatformAffected IPQ5300Affected IPQ5302Affected IPQ5312Affected IPQ5332Affected IPQ9008Affected IPQ9048Affected IPQ9554Affected IPQ9570Affected IPQ9574Affected QCA0000Affected QCA8075Affected QCA8081Affected QCA8082Affected QCA8084Affected QCA8085Affected QCA8386Affected QCF8000Affected QCF8000SFPAffected QCF8001Affected QCN5124Affected QCN6224Affected and 35 more versions

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 6900Affected
FastConnect 7800Affected
Immersive Home 3210 PlatformAffected
Immersive Home 326 PlatformAffected
IPQ5300Affected
IPQ5302Affected
IPQ5312Affected
IPQ5332Affected
IPQ9008Affected
IPQ9048Affected
IPQ9554Affected
IPQ9570Affected
IPQ9574Affected
QCA0000Affected
QCA8075Affected
QCA8081Affected
QCA8082Affected
QCA8084Affected
QCA8085Affected
QCA8386Affected
QCF8000Affected
QCF8000SFPAffected
QCF8001Affected
QCN5124Affected
QCN6224Affected
and 35 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.