CVE-2024-43064

🗓️ 06 Jan 2025 10:33:21Reported by qualcommType

Permissions issue in Automotive OS Platform leads to uncontrolled resource consumption via SMMU access.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-43064	6 Jan 202511:12	–	circl
CNNVD	Qualcomm Chipsets 权限许可和访问控制问题漏洞	6 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-43064 Permissions, Privileges, and Access Controls issue in Automotive OS Platform	6 Jan 202510:33	–	cvelist
EUVD	EUVD-2024-40708	3 Oct 202520:07	–	euvd
NVD	CVE-2024-43064	6 Jan 202511:15	–	nvd
RedhatCVE	CVE-2024-43064	5 Feb 202512:46	–	redhatcve
Vulnrichment	CVE-2024-43064 Permissions, Privileges, and Access Controls issue in Automotive OS Platform	6 Jan 202510:33	–	vulnrichment

NVD

Node

qualcomm qam8255p_firmwareMatch-

AND

qualcomm qam8255pMatch-

Node

qualcomm qam8295p_firmwareMatch-

AND

qualcomm qam8295pMatch-

Node

qualcomm qam8620p_firmwareMatch-

AND

qualcomm qam8620pMatch-

Node

qualcomm qam8650p_firmwareMatch-

AND

qualcomm qam8650pMatch-

Node

qualcomm qam8775p_firmwareMatch-

AND

qualcomm qam8775pMatch-

Node

qualcomm qamsrv1h_firmwareMatch-

AND

qualcomm qamsrv1hMatch-

Node

qualcomm qamsrv1m_firmwareMatch-

AND

qualcomm qamsrv1mMatch-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qca6595_firmwareMatch-

AND

qualcomm qca6595Match-

Node

qualcomm qca6595au_firmwareMatch-

AND

qualcomm qca6595auMatch-

Node

qualcomm qca6688aq_firmwareMatch-

AND

qualcomm qca6688aqMatch-

Node

qualcomm qca6696_firmwareMatch-

AND

qualcomm qca6696Match-

Node

qualcomm qca6698aq_firmwareMatch-

AND

qualcomm qca6698aqMatch-

Node

qualcomm sa7255p_firmwareMatch-

AND

qualcomm sa7255pMatch-

Node

qualcomm sa7775p_firmwareMatch-

AND

qualcomm sa7775pMatch-

Node

qualcomm sa8255p_firmwareMatch-

AND

qualcomm sa8255pMatch-

Node

qualcomm sa8295p_firmwareMatch-

AND

qualcomm sa8295pMatch-

Node

qualcomm sa8540p_firmwareMatch-

AND

qualcomm sa8540pMatch-

Node

qualcomm sa8620p_firmwareMatch-

AND

qualcomm sa8620pMatch-

Node

qualcomm sa8650p_firmwareMatch-

AND

qualcomm sa8650pMatch-

Node

qualcomm sa8770p_firmwareMatch-

AND

qualcomm sa8770pMatch-

Node

qualcomm sa8775p_firmwareMatch-

AND

qualcomm sa8775pMatch-

Node

qualcomm sa9000p_firmwareMatch-

AND

qualcomm sa9000pMatch-

Node

qualcomm sdm429w_firmwareMatch-

AND

qualcomm sdm429wMatch-

Node

qualcomm snapdragon_429_mobile_firmwareMatch-

AND

qualcomm snapdragon_429_mobileMatch-

Node

qualcomm srv1h_firmwareMatch-

AND

qualcomm srv1hMatch-

Node

qualcomm srv1l_firmwareMatch-

AND

qualcomm srv1lMatch-

Node

qualcomm srv1m_firmwareMatch-

AND

qualcomm srv1mMatch-

Node

qualcomm wcn3620_firmwareMatch-

AND

qualcomm wcn3620Match-

Node

qualcomm wcn3660b_firmwareMatch-

AND

qualcomm wcn3660bMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QAM8255P"
      },
      {
        "status": "affected",
        "version": "QAM8295P"
      },
      {
        "status": "affected",
        "version": "QAM8620P"
      },
      {
        "status": "affected",
        "version": "QAM8650P"
      },
      {
        "status": "affected",
        "version": "QAM8775P"
      },
      {
        "status": "affected",
        "version": "QAMSRV1H"
      },
      {
        "status": "affected",
        "version": "QAMSRV1M"
      },
      {
        "status": "affected",
        "version": "QCA6574AU"
      },
      {
        "status": "affected",
        "version": "QCA6595"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6688AQ"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "SA7255P"
      },
      {
        "status": "affected",
        "version": "SA7775P"
      },
      {
        "status": "affected",
        "version": "SA8255P"
      },
      {
        "status": "affected",
        "version": "SA8295P"
      },
      {
        "status": "affected",
        "version": "SA8540P"
      },
      {
        "status": "affected",
        "version": "SA8620P"
      },
      {
        "status": "affected",
        "version": "SA8650P"
      },
      {
        "status": "affected",
        "version": "SA8770P"
      },
      {
        "status": "affected",
        "version": "SA8775P"
      },
      {
        "status": "affected",
        "version": "SA9000P"
      },
      {
        "status": "affected",
        "version": "SDM429W"
      },
      {
        "status": "affected",
        "version": "Snapdragon 429 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "SRV1H"
      },
      {
        "status": "affected",
        "version": "SRV1L"
      },
      {
        "status": "affected",
        "version": "SRV1M"
      },
      {
        "status": "affected",
        "version": "WCN3620"
      },
      {
        "status": "affected",
        "version": "WCN3660B"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html

28 Feb 2025 06:09Current

7.5High risk

Vulners AI Score7.5

CVSS 3.14.7 - 7.5

EPSS0.00059

SSVC

automotive os platform cve-2024-43064 permissions issue access controls smmu access resource consumption