#VU105209 Permissions, Privileges, and Access Controls in Qualcomm products - CVE-2024-53011


Vulnerability identifier: #VU105209

Vulnerability risk: Low

CVSSv4.0: 5.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53011

CWE-ID: CWE-264

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
FastConnect 6700
Mobile applications / Mobile firmware & hardware
FastConnect 6900
Mobile applications / Mobile firmware & hardware
FastConnect 7800
Mobile applications / Mobile firmware & hardware
Flight RB5 5G Platform
Mobile applications / Mobile firmware & hardware
QCA6391
Mobile applications / Mobile firmware & hardware
QCA6564
Mobile applications / Mobile firmware & hardware
QCA6564AU
Mobile applications / Mobile firmware & hardware
QCA6574
Mobile applications / Mobile firmware & hardware
QCA6574A
Mobile applications / Mobile firmware & hardware
QCA6595
Mobile applications / Mobile firmware & hardware
QCA6595AU
Mobile applications / Mobile firmware & hardware
QCA6688AQ
Mobile applications / Mobile firmware & hardware
QCA6696
Mobile applications / Mobile firmware & hardware
QCM8550
Mobile applications / Mobile firmware & hardware
QCN9274
Mobile applications / Mobile firmware & hardware
QCS7230
Mobile applications / Mobile firmware & hardware
QCS8550
Mobile applications / Mobile firmware & hardware
QMP1000
Mobile applications / Mobile firmware & hardware
QRB5165N
Mobile applications / Mobile firmware & hardware
Qualcomm Video Collaboration VC5 Platform
Mobile applications / Mobile firmware & hardware
Robotics RB5 Platform
Mobile applications / Mobile firmware & hardware
SA4150P
Mobile applications / Mobile firmware & hardware
SA4155P
Mobile applications / Mobile firmware & hardware
SA6145P
Mobile applications / Mobile firmware & hardware
SA6150P
Mobile applications / Mobile firmware & hardware
SA6155
Mobile applications / Mobile firmware & hardware
SA8145P
Mobile applications / Mobile firmware & hardware
SA8150P
Mobile applications / Mobile firmware & hardware
SA8155
Mobile applications / Mobile firmware & hardware
SA8155P
Mobile applications / Mobile firmware & hardware
SA8195P
Mobile applications / Mobile firmware & hardware
SC8380XP
Mobile applications / Mobile firmware & hardware
SD 8 Gen1 5G
Mobile applications / Mobile firmware & hardware
SG8275P
Mobile applications / Mobile firmware & hardware
SM6650
Mobile applications / Mobile firmware & hardware
SM7635
Mobile applications / Mobile firmware & hardware
SM7675
Mobile applications / Mobile firmware & hardware
SM7675P
Mobile applications / Mobile firmware & hardware
SM8550P
Mobile applications / Mobile firmware & hardware
SM8635
Mobile applications / Mobile firmware & hardware
SM8635P
Mobile applications / Mobile firmware & hardware
SM8650Q
Mobile applications / Mobile firmware & hardware
SM8735
Mobile applications / Mobile firmware & hardware
SM8750
Mobile applications / Mobile firmware & hardware
SM8750P
Mobile applications / Mobile firmware & hardware
Snapdragon 8 Gen 1 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 8 Gen 2 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 8 Gen 3 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 8+ Gen 1 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 8+ Gen 2 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon AR1 Gen 1 Platform
Mobile applications / Mobile firmware & hardware
Snapdragon AR1 Gen 1 Platform "Luna1"
Mobile applications / Mobile firmware & hardware
Snapdragon AR2 Gen 1 Platform
Mobile applications / Mobile firmware & hardware
SSG2115P
Mobile applications / Mobile firmware & hardware
SSG2125P
Mobile applications / Mobile firmware & hardware
SXR1230P
Mobile applications / Mobile firmware & hardware
SXR2230P
Mobile applications / Mobile firmware & hardware
SXR2250P
Mobile applications / Mobile firmware & hardware
SXR2330P
Mobile applications / Mobile firmware & hardware
WCD9370
Mobile applications / Mobile firmware & hardware
WCD9375
Mobile applications / Mobile firmware & hardware
WCD9378
Mobile applications / Mobile firmware & hardware
WCD9380
Mobile applications / Mobile firmware & hardware
WCD9385
Mobile applications / Mobile firmware & hardware
WCD9390
Mobile applications / Mobile firmware & hardware
WCD9395
Mobile applications / Mobile firmware & hardware
WCN6450
Mobile applications / Mobile firmware & hardware
WCN6650
Mobile applications / Mobile firmware & hardware
WCN6755
Mobile applications / Mobile firmware & hardware
WCN7750
Mobile applications / Mobile firmware & hardware
WCN7860
Mobile applications / Mobile firmware & hardware
WCN7861
Mobile applications / Mobile firmware & hardware
WCN7880
Mobile applications / Mobile firmware & hardware
WCN7881
Mobile applications / Mobile firmware & hardware
WSA8830
Mobile applications / Mobile firmware & hardware
WSA8835
Mobile applications / Mobile firmware & hardware
WSA8840
Mobile applications / Mobile firmware & hardware
WSA8845
Mobile applications / Mobile firmware & hardware
WSA8845H
Mobile applications / Mobile firmware & hardware
QCA6574AU
Hardware solutions / Firmware
QCS8155
Hardware solutions / Firmware
SA6155P
Hardware solutions / Firmware
WSA8832
Hardware solutions / Firmware

Vendor: Qualcomm

Description

The vulnerability allows a local privileged application to read and manipulate data.

The vulnerability exists due to improper input validation in Video Analytics and Processing. A local privileged application can read and manipulate data.

Mitigation
Install security update from vendor's website.

Vulnerable software versions

FastConnect 6700: All versions

FastConnect 6900: All versions

FastConnect 7800: All versions

Flight RB5 5G Platform: All versions

QCA6391: All versions

QCA6564: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6688AQ: All versions

QCA6696: All versions

QCM8550: All versions

QCN9274: All versions

QCS7230: All versions

QCS8155: All versions

QCS8550: All versions

QMP1000: All versions

QRB5165N: All versions

Qualcomm Video Collaboration VC5 Platform: All versions

Robotics RB5 Platform: All versions

SA4150P: All versions

SA4155P: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8145P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SC8380XP: All versions

SD 8 Gen1 5G: All versions

SG8275P: All versions

SM6650: All versions

SM7635: All versions

SM7675: All versions

SM7675P: All versions

SM8550P: All versions

SM8635: All versions

SM8635P: All versions

SM8650Q: All versions

SM8735: All versions

SM8750: All versions

SM8750P: All versions

Snapdragon 8 Gen 1 Mobile Platform: All versions

Snapdragon 8 Gen 2 Mobile Platform: All versions

Snapdragon 8 Gen 3 Mobile Platform: All versions

Snapdragon 8+ Gen 1 Mobile Platform: All versions

Snapdragon 8+ Gen 2 Mobile Platform: All versions

Snapdragon AR1 Gen 1 Platform: All versions

Snapdragon AR1 Gen 1 Platform "Luna1": All versions

Snapdragon AR2 Gen 1 Platform: All versions

SSG2115P: All versions

SSG2125P: All versions

SXR1230P: All versions

SXR2230P: All versions

SXR2250P: All versions

SXR2330P: All versions

WCD9370: All versions

WCD9375: All versions

WCD9378: All versions

WCD9380: All versions

WCD9385: All versions

WCD9390: All versions

WCD9395: All versions

WCN6450: All versions

WCN6650: All versions

WCN6755: All versions

WCN7750: All versions

WCN7860: All versions

WCN7861: All versions

WCN7880: All versions

WCN7881: All versions

WSA8830: All versions

WSA8832: All versions

WSA8835: All versions

WSA8840: All versions

WSA8845: All versions

WSA8845H: All versions

External links
https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Multiple vulnerabilities in Google Android
Multiple vulnerabilities in Qualcomm chipsets