PT-2025-2865 · Qualcomm · Snapdragon+69

Published 2025-02-03 · Updated 2025-02-04 · CVE-2024-49833

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description Memory corruption can occur in the camera when an invalid CID is used. This issue is related to the use of an invalid CID in the camera, which can lead to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

BDU:2025-05521

CVE-2024-49833

Affected Products

Snapdragon

Fastconnect 6700 Firmware

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Qam8255P Firmware

Qam8650P Firmware

Qam8775P Firmware

Qamsrv1H Firmware

Qca6595Au Firmware

Qca6678Aq Firmware

Qca6698Aq Firmware

Qca6797Aq Firmware

Qcs4490 Firmware

Qcs8550 Firmware

Qcs6490 Firmware

Sa7255P Firmware

Sa7775P Firmware

Sa8255P Firmware

Sa8620P Firmware

Sa8650P Firmware

Sa8770P Firmware

Sa8775P Firmware

Sa9000P Firmware

Sd 8 Gen1 5G Firmware

Sg8275P Firmware

Sm6650 Firmware

Sm7635 Firmware

Sm7675 Firmware

Sm8550P Firmware

Sm8635 Firmware

Sm8750 Firmware

Snapdragon 4 Gen 2 Mobile Firmware

Snapdragon 8 Gen 1 Mobile Firmware

Snapdragon 8 Gen 2 Mobile Firmware

Snapdragon 8 Gen 3 Mobile Firmware

Snapdragon Ar1 Gen 1 Firmware

Snapdragon Ar2 Gen 1 Firmware

Srv1H Firmware

Ssg2115P Firmware

Ssg2125P Firmware

Sxr1230P Firmware

Sxr2230P Firmware

Sxr2250P Firmware

Sxr2330P Firmware

Talynplus Firmware

Video Collaboration Vc3 Platform Firmware

Wcd9370 Firmware

Wcd9375 Firmware

Wcd9378 Firmware

Wcd9380 Firmware

Wcd9385 Firmware

Wcd9390 Firmware

Wcd9395 Firmware

Wcn3950 Firmware

Wcn3988 Firmware

Wcn6450 Firmware

Wcn6650 Firmware

Wcn6740 Firmware

Wcn6755 Firmware

Wcn7860 Firmware

Wcn7861 Firmware

Wcn7880 Firmware

Wcn7881 Firmware

Wsa8810 Firmware

Wsa8815 Firmware

Wsa8830 Firmware

Wsa8832 Firmware

Wsa8835 Firmware

Wsa8840 Firmware

Wsa8845 Firmware

References · 10

• https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49833 · Security Note
• https://bdu.fstec.ru/vul/2025-05521 · Security Note
• https://git.codelinaro.org/clo/la/platform/vendor/opensource/camera-kernel/-/commit/88e92abbe4845a94ea263c86795daf51b275c6d2 · Note
• https://t.me/cvedetector/17095 · Telegram Post
• https://git.codelinaro.org/clo/la/platform/vendor/opensource/camera-kernel/-/commit/9209cd35d7c277557c9ff4306ad47049962c3c34 · Note
• https://git.codelinaro.org/clo/la/platform/vendor/opensource/camera-kernel/-/commit/b9cf7fc61d89484524a7e52f42660be446fa2b11 · Note
• https://twitter.com/CVEnew/status/1886462817986879806 · Twitter Post
• https://reddit.com/r/k12cybersecurity/comments/1ihj62l/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://git.codelinaro.org/clo/la/platform/vendor/opensource/camera-kernel/-/commit/16b4ee099d0a144c471417731e6c079a205730bb · Note