What’s Vulnerable › Vulnerabilities

CVE-2024-45557: Use of Out-of-range Pointer Offset in Trust Management Engine

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-07 · updated 2026-06-17
• Weakness: CWE-823

Description

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Affected products

• Qualcomm Ar8035 Firmware: all versions
• Qualcomm Fastconnect 6700 Firmware: all versions
• Qualcomm Fastconnect 6900 Firmware: all versions
• Qualcomm Fastconnect 7800 Firmware: all versions
• Qualcomm Qca6174A Firmware: all versions
• Qualcomm Qca6584Au Firmware: all versions
• Qualcomm Qca6698Aq Firmware: all versions
• Qualcomm Qca8081 Firmware: all versions
• Qualcomm Qca8337 Firmware: all versions
• Qualcomm Qcc710 Firmware: all versions
• Qualcomm Qcm4490 Firmware: all versions
• Qualcomm Qcn6224 Firmware: all versions
• Qualcomm Qcn6274 Firmware: all versions
• Qualcomm Qcs4490 Firmware: all versions
• Qualcomm Qdu1000 Firmware: all versions
• Qualcomm Qdu1010 Firmware: all versions
• Qualcomm Qdu1110 Firmware: all versions
• Qualcomm Qdu1210 Firmware: all versions
• Qualcomm Qdx1010 Firmware: all versions
• Qualcomm Qdx1011 Firmware: all versions
• Qualcomm Qep8111 Firmware: all versions
• Qualcomm Qfw7114 Firmware: all versions
• Qualcomm Qfw7124 Firmware: all versions
• Qualcomm Qru1032 Firmware: all versions
• Qualcomm Qru1052 Firmware: all versions
• Qualcomm Qru1062 Firmware: all versions
• Qualcomm Sc8380Xp Firmware: all versions
• Qualcomm Sd 8 Gen1 5G Firmware: all versions
• Qualcomm Sm8635 Firmware: all versions
• Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware: all versions

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

Get alerted when CVE-2024-45557 or the next vulnerability affects your stack