CVE-2024-45581

Out-of-bounds Write in Audio

Published May 6, 2025 CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Description

Memory corruption while sound model registration for voice activation with audio kernel driver.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
`MDM9628`	affected	—
`QAM8295P`	affected	—
`QCA6564A`	affected	—
`QCA6564AU`	affected	—
`QCA6574A`	affected	—
`QCA6574AU`	affected	—
`QCA6595AU`	affected	—
`QCA6678AQ`	affected	—
`QCA6688AQ`	affected	—
`QCA6696`	affected	—
`QCA6698AQ`	affected	—
`QCA9367`	affected	—
`QCA9377`	affected	—
`QCS8550`	affected	—
`SA6145P`	affected	—
`SA6150P`	affected	—
`SA6155P`	affected	—
`SA8145P`	affected	—
`SA8150P`	affected	—
`SA8155P`	affected	—
`SA8195P`	affected	—
`SA8295P`	affected	—
`SA8530P`	affected	—
`SA8540P`	affected	—
`SA9000P`	affected	—
`SDM429W`	affected	—
`Snapdragon 429 Mobile Platform`	affected	—
`Snapdragon Auto 5G Modem-RF Gen 2`	affected	—
`WCN3620`	affected	—
`WCN3660B`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6688aq:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:qualcomm:sa8530p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8530p:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa8540p:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_429_mobile_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_429_mobile:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-13529	Memory corruption while sound model registration for voice activation with audio kernel driver.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.112% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

History

Feb 27, 2026 3:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jul 13, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00046}`	epss `{'score': 0.00053}`

May 9, 2025 7:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm mdm9628 Qualcomm mdm9628 Firmware Qualcomm qam8295p Qualcomm qam8295p Firmware Qualcomm qca6564a Qualcomm qca6564a Firmware Qualcomm qca6564au Qualcomm qca6564au Firmware Qualcomm qca6574a Qualcomm qca6574a Firmware Qualcomm qca6574au Qualcomm qca6574au Firmware Qualcomm qca6595au Qualcomm qca6595au Firmware Qualcomm qca6678aq Qualcomm qca6678aq Firmware Qualcomm qca6688aq Qualcomm qca6688aq Firmware Qualcomm qca6696 Qualcomm qca6696 Firmware Qualcomm qca6698aq Qualcomm qca6698aq Firmware Qualcomm qca9367 Qualcomm qca9367 Firmware Qualcomm qca9377 Qualcomm qca9377 Firmware Qualcomm qcs8550 Qualcomm qcs8550 Firmware Qualcomm sa6145p Qualcomm sa6145p Firmware Qualcomm sa6150p Qualcomm sa6150p Firmware Qualcomm sa6155p Qualcomm sa6155p Firmware Qualcomm sa8145p Qualcomm sa8145p Firmware Qualcomm sa8150p Qualcomm sa8150p Firmware Qualcomm sa8155p Qualcomm sa8155p Firmware Qualcomm sa8195p Qualcomm sa8195p Firmware Qualcomm sa8295p Qualcomm sa8295p Firmware Qualcomm sa8530p Qualcomm sa8530p Firmware Qualcomm sa8540p Qualcomm sa8540p Firmware Qualcomm sa9000p Qualcomm sa9000p Firmware Qualcomm sdm429w Qualcomm sdm429w Firmware Qualcomm snapdragon 429 Mobile Qualcomm snapdragon 429 Mobile Firmware Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware Qualcomm wcn3620 Qualcomm wcn3620 Firmware Qualcomm wcn3660b Qualcomm wcn3660b Firmware
CPEs		cpe:2.3:h:qualcomm:mdm9628:-:::::::* cpe:2.3:h:qualcomm:qam8295p:-:::::::* cpe:2.3:h:qualcomm:qca6564a:-:::::::* cpe:2.3:h:qualcomm:qca6564au:-:::::::* cpe:2.3:h:qualcomm:qca6574a:-:::::::* cpe:2.3:h:qualcomm:qca6574au:-:::::::* cpe:2.3:h:qualcomm:qca6595au:-:::::::* cpe:2.3:h:qualcomm:qca6678aq:-:::::::* cpe:2.3:h:qualcomm:qca6688aq:-:::::::* cpe:2.3:h:qualcomm:qca6696:-:::::::* cpe:2.3:h:qualcomm:qca6698aq:-:::::::* cpe:2.3:h:qualcomm:qca9367:-:::::::* cpe:2.3:h:qualcomm:qca9377:-:::::::* cpe:2.3:h:qualcomm:qcs8550:-:::::::* cpe:2.3:h:qualcomm:sa6145p:-:::::::* cpe:2.3:h:qualcomm:sa6150p:-:::::::* cpe:2.3:h:qualcomm:sa6155p:-:::::::* cpe:2.3:h:qualcomm:sa8145p:-:::::::* cpe:2.3:h:qualcomm:sa8150p:-:::::::* cpe:2.3:h:qualcomm:sa8155p:-:::::::* cpe:2.3:h:qualcomm:sa8195p:-:::::::* cpe:2.3:h:qualcomm:sa8295p:-:::::::* cpe:2.3:h:qualcomm:sa8530p:-:::::::* cpe:2.3:h:qualcomm:sa8540p:-:::::::* cpe:2.3:h:qualcomm:sa9000p:-:::::::* cpe:2.3:h:qualcomm:sdm429w:-:::::::* cpe:2.3:h:qualcomm:snapdragon_429_mobile:-:::::::* cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:::::::* cpe:2.3:h:qualcomm:wcn3620:-:::::::* cpe:2.3:h:qualcomm:wcn3660b:-:::::::* cpe:2.3:o:qualcomm:mdm9628_firmware:-:::::::* cpe:2.3:o:qualcomm:qam8295p_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6564a_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6564au_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6574a_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6595au_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6678aq_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6688aq_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6696_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6698aq_firmware:-:::::::* cpe:2.3:o:qualcomm:qca9367_firmware:-:::::::* cpe:2.3:o:qualcomm:qca9377_firmware:-:::::::* cpe:2.3:o:qualcomm:qcs8550_firmware:-:::::::* cpe:2.3:o:qualcomm:sa6145p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa6150p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa6155p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8145p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8150p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8155p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8195p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8295p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8530p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8540p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa9000p_firmware:-:::::::* cpe:2.3:o:qualcomm:sdm429w_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_429_mobile_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn3620_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn3660b_firmware:-:::::::*
Vendors & Products		Qualcomm Qualcomm mdm9628 Qualcomm mdm9628 Firmware Qualcomm qam8295p Qualcomm qam8295p Firmware Qualcomm qca6564a Qualcomm qca6564a Firmware Qualcomm qca6564au Qualcomm qca6564au Firmware Qualcomm qca6574a Qualcomm qca6574a Firmware Qualcomm qca6574au Qualcomm qca6574au Firmware Qualcomm qca6595au Qualcomm qca6595au Firmware Qualcomm qca6678aq Qualcomm qca6678aq Firmware Qualcomm qca6688aq Qualcomm qca6688aq Firmware Qualcomm qca6696 Qualcomm qca6696 Firmware Qualcomm qca6698aq Qualcomm qca6698aq Firmware Qualcomm qca9367 Qualcomm qca9367 Firmware Qualcomm qca9377 Qualcomm qca9377 Firmware Qualcomm qcs8550 Qualcomm qcs8550 Firmware Qualcomm sa6145p Qualcomm sa6145p Firmware Qualcomm sa6150p Qualcomm sa6150p Firmware Qualcomm sa6155p Qualcomm sa6155p Firmware Qualcomm sa8145p Qualcomm sa8145p Firmware Qualcomm sa8150p Qualcomm sa8150p Firmware Qualcomm sa8155p Qualcomm sa8155p Firmware Qualcomm sa8195p Qualcomm sa8195p Firmware Qualcomm sa8295p Qualcomm sa8295p Firmware Qualcomm sa8530p Qualcomm sa8530p Firmware Qualcomm sa8540p Qualcomm sa8540p Firmware Qualcomm sa9000p Qualcomm sa9000p Firmware Qualcomm sdm429w Qualcomm sdm429w Firmware Qualcomm snapdragon 429 Mobile Qualcomm snapdragon 429 Mobile Firmware Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware Qualcomm wcn3620 Qualcomm wcn3620 Firmware Qualcomm wcn3660b Qualcomm wcn3660b Firmware

May 6, 2025 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

May 6, 2025 8:45 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Memory corruption while sound model registration for voice activation with audio kernel driver.
Title		Out-of-bounds Write in Audio
Weaknesses		CWE-787
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L'}`

Subscriptions

Qualcomm Mdm9628 Mdm9628 Firmware Qam8295p Qam8295p Firmware Qca6564a Qca6564a Firmware Qca6564au Qca6564au Firmware Qca6574a Qca6574a Firmware Qca6574au Qca6574au Firmware Qca6595au Qca6595au Firmware Qca6678aq Qca6678aq Firmware Qca6688aq Qca6688aq Firmware Qca6696 Qca6696 Firmware Qca6698aq Qca6698aq Firmware Qca9367 Qca9367 Firmware Qca9377 Qca9377 Firmware Qcs8550 Qcs8550 Firmware Sa6145p Sa6145p Firmware Sa6150p Sa6150p Firmware Sa6155p Sa6155p Firmware Sa8145p Sa8145p Firmware Sa8150p Sa8150p Firmware Sa8155p Sa8155p Firmware Sa8195p Sa8195p Firmware Sa8295p Sa8295p Firmware Sa8530p Sa8530p Firmware Sa8540p Sa8540p Firmware Sa9000p Sa9000p Firmware Sdm429w Sdm429w Firmware Snapdragon 429 Mobile Snapdragon 429 Mobile Firmware Snapdragon Auto 5g Modem-rf Gen 2 Snapdragon Auto 5g Modem-rf Gen 2 Firmware Wcn3620 Wcn3620 Firmware Wcn3660b Wcn3660b Firmware

Weaknesses