CVE-2024-45553

Q: What is the severity of CVE-2024-45553?

CVE-2024-45553 has a CVSS score of 7.8 (HIGH). This CVE describes a use-after-free vulnerability in Qualcomm components where memory corruption can occur when process-specific maps are improperly handled in global lists. If exploited, it could allow attackers to execute arbitrary code or cause denial of service. This affects devices using vulnerable Qualcomm chipsets and drivers.

7.8 HIGH

📋 TL;DR

This CVE describes a use-after-free vulnerability in Qualcomm components where memory corruption can occur when process-specific maps are improperly handled in global lists. If exploited, it could allow attackers to execute arbitrary code or cause denial of service. This affects devices using vulnerable Qualcomm chipsets and drivers.

💻 Affected Systems

Products:

Qualcomm chipsets and associated drivers/firmware

Versions: Specific versions not detailed in reference; check Qualcomm January 2025 bulletin for exact affected versions.

Operating Systems: Android, Linux-based systems using Qualcomm components

Default Config Vulnerable: ⚠️ Yes

Notes: Affects systems with Qualcomm hardware where the vulnerable driver/component is loaded and active.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution with kernel privileges leading to complete system compromise, data theft, or persistent backdoor installation.

🟠

Likely Case

Local privilege escalation allowing attackers to gain elevated permissions on affected devices.

🟢

If Mitigated

Denial of service through system crashes or instability if exploitation attempts are blocked.

🌐 Internet-Facing: MEDIUM - Requires local access or chaining with other vulnerabilities for remote exploitation.

🏢 Internal Only: HIGH - Local attackers or malicious insiders could exploit this for privilege escalation on affected devices.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access and timing precision to trigger the race condition between thread operations on global lists.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm January 2025 security bulletin for specific patched versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check Qualcomm January 2025 security bulletin for your specific chipset/driver. 2. Obtain updated firmware/drivers from device manufacturer or Qualcomm. 3. Apply patches following vendor instructions. 4. Reboot affected devices.

🔧 Temporary Workarounds

Disable vulnerable components

Linux-based systems

If possible, disable or blacklist the specific Qualcomm driver/module containing the vulnerability

modprobe -r [vulnerable_module]
echo 'blacklist [vulnerable_module]' >> /etc/modprobe.d/blacklist.conf

🧯 If You Can't Patch

Implement strict access controls to limit local user privileges on affected devices
Monitor for unusual process behavior or privilege escalation attempts using security tools

🔍 How to Verify

Check if Vulnerable:

Check Qualcomm chipset/driver version against affected versions in January 2025 bulletin

Check Version:

cat /sys/devices/soc0/*version* or check device firmware information

Verify Fix Applied:

Verify installed Qualcomm driver/firmware version matches patched versions from bulletin

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
Driver crash messages
Unexpected privilege escalation events

Network Indicators:

None - this is a local vulnerability

SIEM Query:

Search for kernel/driver crash events or privilege escalation patterns on devices with Qualcomm hardware

📊 Metadata

CVE ID: CVE-2024-45553

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

EPSS Score: 0.13% exploit probability (33.2th percentile)

Published: January 6, 2025

Last Updated: August 11, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm4325 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qdu1000 Firmware by Qualcomm

Qdu1010 Firmware by Qualcomm

Qdu1110 Firmware by Qualcomm

Qdu1210 Firmware by Qualcomm

Qdx1010 Firmware by Qualcomm

Qdx1011 Firmware by Qualcomm

Qep8111 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Qru1032 Firmware by Qualcomm

Qru1052 Firmware by Qualcomm

Qru1062 Firmware by Qualcomm

Robotics Rb5 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sd 8 Gen1 5g Firmware by Qualcomm

Sg4150p Firmware by Qualcomm

Sm4635 Firmware by Qualcomm

Sm6650 Firmware by Qualcomm

Sm7635 Firmware by Qualcomm

Sm7675 Firmware by Qualcomm

Sm7675p Firmware by Qualcomm

Sm8550p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Sm8635p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Firmware by Qualcomm

Snapdragon 460 Mobile Firmware by Qualcomm

Snapdragon 480 5g Mobile Firmware by Qualcomm

Snapdragon 480 5g Mobile Firmware by Qualcomm