CVE-2024-45563
HIGHCVSS 7.8/10EPSS 0.09%
Last modified
CVE-2024-45563 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Sdm429w Firmware | All versions |
| Qualcomm | Snapdragon 429 Mobile Firmware | All versions |
| Qualcomm | Snapdragon 8 Gen 1 Mobile Firmware | All versions |
| Qualcomm | Sxr2230p Firmware | All versions |
| Qualcomm | Sxr2250p Firmware | All versions |
| Qualcomm | Wcd9380 Firmware | All versions |
| Qualcomm | Wcd9385 Firmware | All versions |
| Qualcomm | Wcn3620 Firmware | All versions |
| Qualcomm | Wcn3660b Firmware | All versions |
| Qualcomm | Wsa8830 Firmware | All versions |
| Qualcomm | Wsa8832 Firmware | All versions |
| Qualcomm | Wsa8835 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-45563?
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
How severe is CVE-2024-45563?
CVE-2024-45563 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.09% probability of exploitation in the next 30 days.
How do I fix CVE-2024-45563?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-45558Transient DOS can occur when the driver parses the per STA p…7.5
- CVE-2024-45559Transient DOS can occur when GVM sends a specific message ty…5.5
- CVE-2024-4556Improper Limitation of a Pathname to a Restricted Directory …7.5
- CVE-2024-45560Memory corruption while taking a snapshot with hardware enco…7
- CVE-2024-45561Memory corruption while handling IOCTL call from user-space…7.8
- CVE-2024-45562Memory corruption during concurrent access to server info ob…7.8
- CVE-2024-45564Memory corruption during concurrent access to server info ob…7.8
- CVE-2024-45565Memory corruption when blob structure is modified by user-sp…7
- CVE-2024-45566Memory corruption during concurrent buffer access due to mod…7.8
- CVE-2024-45567Memory corruption while encoding JPEG format.7.8
- CVE-2024-45568Memory corruption due to improper bounds check while command…7.8
- CVE-2024-45569Memory corruption while parsing the ML IE due to invalid fra…9.8
Are you affected by CVE-2024-45563?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST