PT-2025-2514 · Qualcomm · Qualcomm Embedded Platform Microcode

Published 2024-03-15 · Updated 2025-02-03 · CVE-2024-38418

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform microcode (affected versions not specified)

Description: The issue is related to a memory corruption problem that occurs when parsing memory map information in IOCTL calls. This can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability is also described as a race condition error in the camera sensor driver module.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-01151

CVE-2024-38418

Affected Products

Qualcomm Embedded Platform Microcode

References · 4

• https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01151 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38418 · Security Note
• https://twitter.com/CVEnew/status/1886462825599480306 · Twitter Post