CVE-2024-45558: qualcomm, inc. snapdragon Buffer Over-read

Vulnerability summary

CVE-2024-45558 is a high (CVSS 7.5) Buffer Over-read vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.5% of scored vulnerabilities.

Timeline

1. 06-01-2025
   PublishedVulnerability first disclosed.
2. 06-01-2025
   Last modifiedVulnerability information updated.

Description

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

• CWE-126Buffer Over-readThe product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.