CVE-2024-45557

Use of Out-of-range Pointer Offset in Trust Management Engine

State: Published
Severity: 7.8 High
Published: Apr 7, 2025
Updated: Feb 26, 2026
Reserved: Sep 2, 2024

Description

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-823 Use of Out-of-range Pointer Offset

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected QCA6174AAffected QCA6584AUAffected QCA6698AQAffected QCA8081Affected QCA8337Affected QCC710Affected QCM4490Affected QCN6224Affected QCN6274Affected QCS4490Affected QDU1000Affected QDU1010Affected QDU1110Affected QDU1210Affected QDX1010Affected QDX1011Affected QEP8111Affected QFW7114Affected QFW7124Affected QRU1032Affected QRU1052Affected and 36 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCA6174AAffected
QCA6584AUAffected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
QCC710Affected
QCM4490Affected
QCN6224Affected
QCN6274Affected
QCS4490Affected
QDU1000Affected
QDU1010Affected
QDU1110Affected
QDU1210Affected
QDX1010Affected
QDX1011Affected
QEP8111Affected
QFW7114Affected
QFW7124Affected
QRU1032Affected
QRU1052Affected
and 36 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.