We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-49837

Improper Validation of Array Index in Automotive OS Platform QNX



Description

Memory corruption while reading CPU state data during guest VM suspend.

Reserved 2024-10-20 | Published 2025-02-03 | Updated 2025-02-03 | Assigner qualcomm


HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-129 Improper Validation of Array Index

Product status

Default status
unaffected

QAM8255P
affected

QAM8295P
affected

QAM8620P
affected

QAM8650P
affected

QAM8775P
affected

QAMSRV1H
affected

QAMSRV1M
affected

QCA6574AU
affected

QCA6595
affected

QCA6595AU
affected

QCA6688AQ
affected

QCA6696
affected

QCA6698AQ
affected

SA7255P
affected

SA7775P
affected

SA8255P
affected

SA8295P
affected

SA8540P
affected

SA8620P
affected

SA8650P
affected

SA8770P
affected

SA8775P
affected

SA9000P
affected

SRV1H
affected

SRV1L
affected

SRV1M
affected

References

docs.qualcomm.com/...itybulletin/february-2025-bulletin.html

cve.org (CVE-2024-49837)

nvd.nist.gov (CVE-2024-49837)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-49837

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.