Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

MCDM Driver IOCTL Calls Cause Data Corruption in Certain Apps

CVE-2024-45550 · published 1 year ago
Summary

Using certain applications that call IOCTLs on the MCDM driver can cause data corruption in memory. This is a potential issue for applications that interact with the MCDM driver, which may lead to instability or crashes. To mitigate this risk, update or replace the affected applications or drivers.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
qualcomm fastconnect_6900_firmware All versions
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
qualcomm fastconnect_7800_firmware All versions
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
qualcomm sc8380xp_firmware All versions
cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*
qualcomm wcd9380_firmware All versions
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
qualcomm wcd9385_firmware All versions
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8840_firmware All versions
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8845_firmware All versions
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8845h_firmware All versions
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Original advisory text
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-129Improper Validation of Array Index
Timeline
Published6 Jan 2025
Updated30 Sep 2026
First seen7 Mar 2026
Sources
CVE-2024-45550 · NVD
Track software like this
Free during beta