CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_6900:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_7800:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sc8380xp:*:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9380:*:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9385:*:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8840:*:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8845:*:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8845h:*:*:*:*:*:*:*:*

History

07 Mar 2025, 11:47

Type	Values Removed	Values Added
CWE		CWE-119
Summary		(es) Se produce una corrupción de memoria durante una llamada de Escape si se pasan un evento de CPU de modo kernel no válido y un identificador de objeto de sincronización con el indicador DriverKnownEscape restablecido.
References	~~() https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html -~~	() https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html - Vendor Advisory
CPE		cpe:2.3:o:qualcomm:wsa8845h_firmware:-:::::::* cpe:2.3:o:qualcomm:sc8380xp_firmware:-:::::::* cpe:2.3:h:qualcomm:fastconnect_6900:::::::: cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::* cpe:2.3:h:qualcomm:wcd9385:::::::: cpe:2.3:h:qualcomm:wsa8845h:::::::: cpe:2.3:h:qualcomm:wsa8845:::::::: cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::* cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:::::::* cpe:2.3:h:qualcomm:sc8380xp:::::::: cpe:2.3:h:qualcomm:wsa8840:::::::: cpe:2.3:h:qualcomm:wcd9380:::::::: cpe:2.3:h:qualcomm:fastconnect_7800:::::::: cpe:2.3:o:qualcomm:wsa8845_firmware:-:::::::* cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8840_firmware:-:::::::*
First Time		Qualcomm sc8380xp Firmware Qualcomm Qualcomm wsa8845 Qualcomm wcd9385 Firmware Qualcomm wcd9380 Qualcomm fastconnect 7800 Qualcomm wsa8840 Firmware Qualcomm wcd9380 Firmware Qualcomm fastconnect 7800 Firmware Qualcomm wsa8845h Qualcomm wcd9385 Qualcomm wsa8840 Qualcomm wsa8845 Firmware Qualcomm fastconnect 6900 Firmware Qualcomm wsa8845h Firmware Qualcomm fastconnect 6900 Qualcomm sc8380xp

03 Mar 2025, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-03 11:15

Updated : 2025-03-07 11:47

NVD link : CVE-2024-53034

Mitre link : CVE-2024-53034

CVE.ORG link : CVE-2024-53034

JSON object : View

Products Affected

qualcomm

fastconnect_7800_firmware
fastconnect_6900_firmware
wcd9380
fastconnect_6900
wsa8840_firmware
wcd9380_firmware
sc8380xp_firmware
wsa8840
wcd9385
wsa8845
sc8380xp
wsa8845h_firmware
wsa8845h
fastconnect_7800
wsa8845_firmware
wcd9385_firmware

CWE

CWE-822

Untrusted Pointer Dereference

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2024-53034", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-03-03T11:15:15.360", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html", "tags": ["Vendor Advisory"], "source": "product-security@qualcomm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-822"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset."}, {"lang": "es", "value": "Se produce una corrupci\u00f3n de memoria durante una llamada de Escape si se pasan un evento de CPU de modo kernel no v\u00e1lido y un identificador de objeto de sincronizaci\u00f3n con el indicador DriverKnownEscape restablecido."}], "lastModified": "2025-03-07T11:47:34.540", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E670F500-9B71-4BBE-B5DA-221D35803C89"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_6900:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4960983D-7D32-4AE8-AFF9-22FDEEEA1C11"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7074D04-5015-45EA-826B-6E0F85F441EB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14E3FE58-7F1C-4F5C-B62D-0CF124E14AB2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sc8380xp:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6E486C5-1567-4C1B-B01C-02F6A331CBC9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9380:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7866947A-ADE3-432A-81C5-8C51A82929C3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92B17201-8185-47F1-9720-5AB4ECD11B22"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9385:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "07B47B08-E12E-4846-822E-EB16FE42A181"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8840:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "109D7C08-566D-4F9D-B706-ADB232C3DB23"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F5B187B8-56FB-4DC5-A4FC-9B9E09B9EA7B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845h:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "75F541E7-A11E-4403-81E3-D991E4DCA724"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "product-security@qualcomm.com"}

7.8 /10