Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2024-45557Use of Out-of-range Pointer Offset in Trust Management Engine

Description

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Timeline

  1. ID reserved

    By qualcomm

  2. · 7 months later

    Published

  3. · 11 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-45557, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Analyzed3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.11% · top 99% of all CVEs (15 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AR8035
    • affected FastConnect 6700
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected QCA6174A
    • affected QCA6584AU
    • affected QCA6698AQ
    • affected QCA8081
    • affected QCA8337
    • affected QCC710
    • affected QCM4490
    • affected QCN6224
    • affected QCN6274
    • affected QCS4490
    • affected QDU1000
    • affected QDU1010
    • affected QDU1110
    • affected QDU1210
    • affected QDX1010
    • affected QDX1011
    • affected QEP8111
    • affected QFW7114
    • affected QFW7124
    • affected QRU1032
    • affected QRU1052
    • affected QRU1062
    • affected SC8380XP
    • affected SD 8 Gen1 5G
    • affected SM8635
    • affected Snapdragon 4 Gen 2 Mobile Platform
    • affected Snapdragon 8 Gen 1 Mobile Platform
    • affected Snapdragon 8 Gen 3 Mobile Platform
    • affected Snapdragon 8+ Gen 1 Mobile Platform
    • affected Snapdragon AR2 Gen 1 Platform
    • affected Snapdragon Auto 5G Modem-RF Gen 2
    • affected Snapdragon X35 5G Modem-RF System
    • affected Snapdragon X72 5G Modem-RF System
    • affected Snapdragon X75 5G Modem-RF System
    • affected SSG2115P
    • affected SSG2125P
    • and 21 more

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-45557 badge
[![CVE-2024-45557](https://cveledger.app/badge/CVE-2024-45557.svg)](https://cveledger.app/cve/CVE-2024-45557)

Record last updated .