PT-2025-2712 · Qualcomm · Qualcomm Snapdragon Auto

Published 2025-02-03 · Updated 2025-02-11 · CVE-2024-45569

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto (affected versions not specified)

Description Memory corruption occurs while parsing the ML IE due to invalid frame content. This issue could potentially be exploited for remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

BDU:2025-02680

CVE-2024-45569

Affected Products

Qualcomm Snapdragon Auto

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2024-45569 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02680 · Security Note
• https://twitter.com/BursaMatus/status/1886500180041580812 · Twitter Post
• https://t.me/cvedetector/17097 · Telegram Post
• https://reddit.com/r/k12cybersecurity/comments/1ihj62l/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://reddit.com/r/Action1/comments/1in5t4f/patch_tuesday_alert_february_2025 · Reddit Post
• https://t.me/true_secator/6695 · Telegram Post
• https://twitter.com/xvonfers/status/1886466530570854498 · Twitter Post
• https://twitter.com/vuldb/status/1886471221602345433 · Twitter Post
• https://twitter.com/CveFindCom/status/1886460096068149528 · Twitter Post
• https://twitter.com/CVEnew/status/1886462822625787962 · Twitter Post