#VU105209 Permissions, Privileges, and Access Controls in Qualcomm products - CVE-2024-53011

Vulnerability identifier: #VU105209

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-53011

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
FastConnect 6700
FastConnect 6900
FastConnect 7800
Flight RB5 5G Platform
QCA6391
QCA6564
QCA6564AU
QCA6574
QCA6574A
QCA6595
QCA6595AU
QCA6688AQ
QCA6696
QCM8550
QCN9274
QCS7230
QCS8550
QMP1000
QRB5165N
Qualcomm Video Collaboration VC5 Platform
Robotics RB5 Platform
SA4150P
SA4155P
SA6145P
SA6150P
SA6155
SA8145P
SA8150P
SA8155
SA8155P
SA8195P
SC8380XP
SD 8 Gen1 5G
SG8275P
SM6650
SM7635
SM7675
SM7675P
SM8550P
SM8635
SM8635P
SM8650Q
SM8735
SM8750
SM8750P
Snapdragon 8 Gen 1 Mobile Platform
Snapdragon 8 Gen 2 Mobile Platform
Snapdragon 8 Gen 3 Mobile Platform
Snapdragon 8+ Gen 1 Mobile Platform
Snapdragon 8+ Gen 2 Mobile Platform
Snapdragon AR1 Gen 1 Platform
Snapdragon AR1 Gen 1 Platform "Luna1"
Snapdragon AR2 Gen 1 Platform
SSG2115P
SSG2125P
SXR1230P
SXR2230P
SXR2250P
SXR2330P
WCD9370
WCD9375
WCD9378
WCD9380
WCD9385
WCD9390
WCD9395
WCN6450
WCN6650
WCN6755
WCN7750
WCN7860
WCN7861
WCN7880
WCN7881
WSA8830
WSA8835
WSA8840
WSA8845
WSA8845H
QCA6574AU
QCS8155
SA6155P
WSA8832

Software vendor:
Qualcomm

The vulnerability allows a local privileged application to read and manipulate data.

The vulnerability exists due to improper input validation in Video Analytics and Processing. A local privileged application can read and manipulate data.

Install security update from vendor's website.

• https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html