CVE-2024-45578— Improper Validation of Array Index in Camera Driver
Possible ATT&CK Techniques 2AI
T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-45578
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Validation of Array Index in Camera Driver
Source: CVE Program / CVE List V5
Vulnerability Description
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数组索引的验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Qualcomm Chipsets 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Qualcomm Chipsets是美国高通（Qualcomm）公司的一系列芯片组。 Qualcomm Chipsets存在输入验证错误漏洞，该漏洞源于IFE输出资源ID验证期间获取和更新IOCTL时内存损坏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | - |
II. Public POCs for CVE-2024-45578
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-45578
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-45578 (1)
Same Patch Batch · Qualcomm, Inc. · 2025-05-06 · 35 CVEs total
| CVE-2024-49846 | 8.2 HIGH | Buffer Over-read in Multi-Mode Call Processor |
| CVE-2025-21470 | 7.8 HIGH | Improper Access Control in Camera Driver |
| CVE-2024-45554 | 7.8 HIGH | Use After Free in DSP Service |
| CVE-2024-45564 | 7.8 HIGH | Use After Free in HLOS |
| CVE-2024-45565 | 7.8 HIGH | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver |
| CVE-2024-45566 | 7.8 HIGH | Use After Free in Camera Driver |
| CVE-2024-45567 | 7.8 HIGH | Use After Free in Camera Driver |
| CVE-2024-45574 | 7.8 HIGH | Improper Validation of Array Index in Camera Driver |
| CVE-2024-45575 | 7.8 HIGH | Integer Overflow or Wraparound in Camera Driver |
| CVE-2024-45576 | 7.8 HIGH | Improper Validation of Array Index in Camera Driver |
| CVE-2024-45577 | 7.8 HIGH | Improper Input Validation in Camera Driver |
| CVE-2024-45579 | 7.8 HIGH | Improper Input Validation in Camera Driver |
| CVE-2024-49835 | 7.8 HIGH | Out-of-bounds Write in SPS Applications |
| CVE-2024-49841 | 7.8 HIGH | Detection of Error Condition Without Action in Hypervisor |
| CVE-2025-21460 | 7.8 HIGH | Improper Input Validation in Automotive Software platform based on QNX |
| CVE-2025-21475 | 7.8 HIGH | Buffer Over-read in Display |
| CVE-2025-21469 | 7.8 HIGH | Improper Access Control in Camera Driver |
| CVE-2025-21468 | 7.8 HIGH | Out-of-bounds Write in Computer Vision |
| CVE-2025-21467 | 7.8 HIGH | Out-of-bounds Write in Computer Vision |
| CVE-2025-21462 | 7.8 HIGH | Out-of-bounds Write in Computer Vision |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Snapdragon
- CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut - CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware - CVE-2026-25288
Buffer Over-read in WLAN Firmware - CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr - CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same vendor: Qualcomm, Inc.
- CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut - CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware - CVE-2026-25288
Buffer Over-read in WLAN Firmware - CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr - CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same weakness: CWE-129
- CVE-2026-45799
Wire: skipGroup() missing negative-length check allows 10-by - CVE-2026-63308
Helm Files.Lines Denial of Service via Empty Chart Files - CVE-2026-46377
Dasel: Index-out-of-range panic in dasel selector lexer on t - CVE-2026-24238
NVIDIA TensorRT 输入验证错误漏洞 - CVE-2026-15685
Ollama downloadBlob Improper Validation of Array Index Denia
V. Comments for CVE-2024-45578
No comments yet