How to fix CVE-2024-45581?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Is Memory Corruption affected by CVE-2024-45581?

CVE-2024-45581 presents notable security risk, a out-of-bounds write vulnerability rated CVSS 6.6. Exploitation could cause memory corruption or application crashes. A patch is available and should be applied during regular vulnerability management.

CVE-2024-45581

MEDIUM

2025-05-06 [email protected]

6.6

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:40 vuln.today

Patch Released

Mar 28, 2026 - 18:40 nvd

Patch available

CVE Published

May 06, 2025 - 09:15 nvd

MEDIUM 6.6

Tags

Memory Corruption Buffer Overflow Mdm9628 Firmware Qam8295p Firmware Qca6564a Firmware Qca6564au Firmware Qca6574a Firmware Qca6574au Firmware Qca6595au Firmware Qca6678aq Firmware Qca6688aq Firmware Qca6696 Firmware Qca6698aq Firmware Qca9367 Firmware Qca9377 Firmware Qcs8550 Firmware Sa6145p Firmware Sa6150p Firmware Sa6155p Firmware Sa8145p Firmware Sa8150p Firmware Sa8155p Firmware Sa8195p Firmware Sa8295p Firmware Sa8530p Firmware Sa8540p Firmware Sa9000p Firmware Sdm429w Firmware Snapdragon 429 Mobile Firmware Snapdragon Auto 5g Modem Rf Gen 2 Firmware Wcn3620 Firmware Wcn3660b Firmware

Description

Memory corruption while sound model registration for voice activation with audio kernel driver.

Analysis

Memory corruption while sound model registration for voice activation with audio kernel driver. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Technical Context

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. Memory corruption while sound model registration for voice activation with audio kernel driver. Affected products include: Qualcomm Mdm9628 Firmware, Qualcomm Qam8295P Firmware, Qualcomm Qca6564A Firmware, Qualcomm Qca6564Au Firmware, Qualcomm Qca6574A Firmware.

Affected Products

Qualcomm Mdm9628 Firmware, Qualcomm Qam8295P Firmware, Qualcomm Qca6564A Firmware, Qualcomm Qca6564Au Firmware, Qualcomm Qca6574A Firmware.

Remediation

A vendor patch is available. Apply the latest security update as soon as possible. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.2

CVSS: +33

POC: 0

CVE-2024-45581 vulnerability details – vuln.today

Back