CVE-2024-53032
Published: 03 March 2025
Summary
CVE-2024-53032 is a high-severity Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) vulnerability in Qualcomm Qam8255P Firmware. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 24.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Requires timely identification, reporting, and patching of the specific memory corruption flaw in the keyboard virtual device as detailed in Qualcomm's security bulletin.
Enforces memory protection mechanisms such as ASLR and DEP to prevent exploitation of memory corruption triggered by guest VM interactions.
Validates and sanitizes inputs from guest VMs to the keyboard virtual device, reducing the risk of interactions causing memory corruption.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local memory corruption in virtual device (guest-triggered) directly enables privilege escalation via exploitation of the flaw.
NVD Description
Memory corruption may occur in keyboard virtual device due to guest VM interaction.
Deeper analysisAI
CVE-2024-53032 is a memory corruption vulnerability (CWE-367) in the keyboard virtual device triggered by guest VM interactions. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and was published on March 3, 2025. The issue affects components in Qualcomm products, as outlined in their security advisories.
A local attacker with low privileges can exploit this vulnerability due to its low attack complexity and lack of required user interaction. Exploitation leads to memory corruption, enabling high-impact consequences including unauthorized data disclosure, modification, and denial of service within the affected scope.
Qualcomm's March 2025 security bulletin at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html details patches and mitigation guidance for addressing this vulnerability.
Details
- CWE(s)