CVE-2024-45582· NVD / CVE Program· CNA qualcomm

Improper Validation of Array Index in Camera Driver

Memory corruption while validating number of devices in Camera kernel .

HighCVSS 7.8 · v3.1—No exploit No fix recorded

Published: Feb 3, 2025
Updated: Jun 17, 2026
EPSS: 0.1% · 1th percentile
CWE: CWE-129

Follow this CVE

Report tools

JSON

Action score

Monitor

Low priority for now.

CVSS: 31 / 40 · 7.8 / 10
CISA KEV: 0 / 30 · Not listed
EPSS: 0 / 30 · 0.1%

CISA SSVC decision

Exploitation: none
Automatable: no
Technical impact: total

Vulnrichment: CISA's decision-tree inputs.

CNA vs NVD score

NVD: —
CNA · qualcomm: 7.8; NVD has not scored this yet; the score shown is the CNA’s.

The score given by the assigning authority versus NVD’s independent score. A gap means the severity is contested.

Noroxi analysis

No Noroxi analysis for this record yet

We don't hand-write analysis for the hundreds of thousands of vulnerabilities in the database; that wouldn't be honest. For notable, high-impact vulnerabilities our team writes the mechanism, detection and remediation steps.

We use this product, ask for help

Affected systems

Vendor	Product	CPE
qualcomm	fastconnect 6900 firmware	cpe:2.3:o:qualcomm:fastconnect_6900_firmware
qualcomm	fastconnect 6900	cpe:2.3:h:qualcomm:fastconnect_6900
qualcomm	fastconnect 7800 firmware	cpe:2.3:o:qualcomm:fastconnect_7800_firmware
qualcomm	fastconnect 7800	cpe:2.3:h:qualcomm:fastconnect_7800
qualcomm	qcm8550 firmware	cpe:2.3:o:qualcomm:qcm8550_firmware
qualcomm	qcm8550	cpe:2.3:h:qualcomm:qcm8550
qualcomm	qcs6490 firmware	cpe:2.3:o:qualcomm:qcs6490_firmware
qualcomm	qcs6490	cpe:2.3:h:qualcomm:qcs6490
qualcomm	video collaboration vc3 platform firmware	cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware
qualcomm	video collaboration vc3 platform	cpe:2.3:h:qualcomm:video_collaboration_vc3_platform
qualcomm	sm6650 firmware	cpe:2.3:o:qualcomm:sm6650_firmware
qualcomm	sm6650	cpe:2.3:h:qualcomm:sm6650

and 56 more

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

qualcomm fastconnect 6900 firmwareall versions
qualcomm fastconnect 7800 firmwareall versions
qualcomm qcm8550 firmwareall versions
qualcomm qcs6490 firmwareall versions
qualcomm sm6650 firmwareall versions
qualcomm sm7635 firmwareall versions
qualcomm sm7675 firmwareall versions
qualcomm sm7675p firmwareall versions
qualcomm sm8550p firmwareall versions
qualcomm sm8635 firmwareall versions
qualcomm sm8635p firmwareall versions
qualcomm snapdragon 8 gen 1 mobile firmwareall versions
qualcomm snapdragon 8 gen 2 mobile firmwareall versions
qualcomm snapdragon 8 gen 3 mobile firmwareall versions
qualcomm snapdragon 8+ gen 2 mobile firmwareall versions
qualcomm video collaboration vc3 platform firmwareall versions
qualcomm wcd9370 firmwareall versions
qualcomm wcd9375 firmwareall versions
qualcomm wcd9378 firmwareall versions
qualcomm wcd9380 firmwareall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (qualcomm). Independent of NVD's CPE analysis and usually ahead of it.

Qualcomm, Inc. Snapdragon
- FastConnect 6900, FastConnect 7800, QCM8550, QCS6490, Qualcomm Video Collaboration VC3 Platform, SM6650, SM7635, SM7675, SM7675P, SM8550P, SM8635, SM8635P … (+22)affected

Same product

qualcomm: all records

Other highest-scoring records for the same primary product.

CVE-2025-27034Improper Validation of Array Index in Multi-Mode Call Processor
39Monitor
CVE-2025-47405Untrusted Pointer Dereference in Camera
31Monitor
CVE-2025-47358Use After Free in Secure Processor
31Monitor
CVE-2025-47339Use After Free in HLOS
31Monitor
CVE-2025-47323Integer Overflow or Wraparound in Audio
31Monitor
CVE-2025-47350Use After Free in DSP Service
31Monitor

Remediation

Which version to upgrade to

Fix versions compiled from the vendor, package registries and Microsoft. Verify the vendor's note before upgrading.

No fix version is recorded for this entry. Check the references for vendor advisories.

Exploit status

No known public exploit

No public exploit has been observed yet. That doesn't mean you're safe, only that the bar is a little higher.

Research context

For pentesters and researchers: attack profile, score disagreement, timeline, patch commits, credits, variant and chain candidates, bug bounty scope. All derived from existing data; no exploit code.

Timeline

From publication to today: proof of concept, Metasploit module, CISA KEV and fix record. Dates are as reported by the sources.

No dated events beyond publication.

EPSS, last 120 days

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Patch and commit links

Commit, PR and diff links among the references. A starting point for patch-diffing and variant hunting; fixes, not exploits.

No commit or PR link among the references.

Credits

All researchers

Finders, reporters and analysts named in the CNA record. Click a name for that researcher’s other records.

No credits in the CNA record.

Variant candidates

Same product, same weakness class, within 18 months. If the patch missed the root cause, the sibling bug is here.

CVE-2025-27034233 days apartImproper Validation of Array Index in Multi-Mode Call Processor
39Monitor
CVE-2024-498320 days apartImproper Validation of Array Index in Camera
31Monitor
CVE-2024-4555028 days apartImproper Validation of Array Index in DSP Services
31Monitor
CVE-2024-4983628 days apartImproper Validation of Array Index in Camera
31Monitor
CVE-2025-2144763 days apartImproper Validation of Array Index in Computer Vision
31Monitor
CVE-2024-4557892 days apartImproper Validation of Array Index in Camera Driver
31Monitor

Chain candidates

An authentication bypass and a privilege-requiring bug in the same product, published close together: combined they may become an unauthenticated path.

—

Bug bounty scope

No known public program.

Source: bounty-targets-data (public HackerOne, Bugcrowd, Intigriti, YesWeHack listings).