Details of VAR-202504-3038

ID

VAR-202504-3038

CVE

CVE-2024-45552

TITLE

Buffer over-read vulnerability in multiple Qualcomm products

Trust: 0.8

sources: JVNDB: JVNDB-2024-028600

DESCRIPTION

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. APQ8064AU firmware, fastconnect 6200 firmware, fastconnect 6700 A buffer over-read vulnerability exists in firmware and other parts of multiple Qualcomm products.Information is obtained and service operation is interrupted (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2024-45552 // JVNDB: JVNDB-2024-028600

AFFECTED PRODUCTS

vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6696	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8775p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8775p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6797aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9326	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	video collaboration vc3 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9395	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 208 processor	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm8550p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 210 processor	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon w5\+ gen 1 wearable platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8620p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd865 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 835 mobile pc platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon wear 2100 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 8\+ gen 2 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	205 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart audio 200 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr2130	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8209	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 865\+ 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon wear 2500 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3615	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 695 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6391	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 429 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 8 gen 2 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8770p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 100 platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 820 automotive platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon wear 3100 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 212 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 8\+ gen 1 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 8 gen 3 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	robotics rb3 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3988	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8255p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart display 200 platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 625 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 680 4g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8845h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9341	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8650p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6436	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 845 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6700	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr2 5g platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd626	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8064au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8108	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6698aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8620p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 4 gen 1 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 480 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 660 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	srv1m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8650p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3910	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6200	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 7800	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 460 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8909w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr1120	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 662 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	video collaboration vc1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 685 4g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 400 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 200 platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa7775p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa9000p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x55 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 626 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6800	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	215 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 870 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qamsrv1h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8195p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 480\+ 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm4125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9385	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8608	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6426	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 865 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8255p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6900	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8840	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa7255p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm429w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qamsrv1m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sg4150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	srv1h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	srv1l	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	fastconnect 6900	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8064au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3980	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	fastconnect 6200	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	fastconnect 6700	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3950	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9380	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3610	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9395	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wsa8810	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3990	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3988	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3660b	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9385	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3620	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3615	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3910	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	fastconnect 6800	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9390	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3680b	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2024-028600 // NVD: CVE-2024-45552

CVSS

SEVERITY

CVSSV2

CVSSV3

product-security@qualcomm.com:	CVE-2024-45552
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2024-028600
value:	HIGH
Trust: 0.8

product-security@qualcomm.com:	CVE-2024-45552
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	4.2
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2024-028600
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2024-028600 // NVD: CVE-2024-45552

PROBLEMTYPE DATA

problemtype:	CWE-126	Trust: 1.0
problemtype:	buffer over read (CWE-126) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-028600 // NVD: CVE-2024-45552

EXTERNAL IDS

db:	NVD	id:	CVE-2024-45552	Trust: 2.6
db:	JVNDB	id:	JVNDB-2024-028600	Trust: 0.8

sources: JVNDB: JVNDB-2024-028600 // NVD: CVE-2024-45552

REFERENCES

url:	https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-45552	Trust: 0.8

sources: JVNDB: JVNDB-2024-028600 // NVD: CVE-2024-45552

SOURCES

db:	JVNDB	id:	JVNDB-2024-028600
db:	NVD	id:	CVE-2024-45552

LAST UPDATE DATE

2025-10-10T23:39:01.185000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2024-028600	date:	2025-10-08T01:33:00
db:	NVD	id:	CVE-2024-45552	date:	2025-10-06T20:00:52.770

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2024-028600	date:	2025-10-08T00:00:00
db:	NVD	id:	CVE-2024-45552	date:	2025-04-07T11:15:49.667