CVE-2024-53031

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 0.12%
EPSS Percentile: 1.97%
CISA KEV: Not listed

Description

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 03-Mar-2025 18:15
Last Modified: 17-Jun-2026 15:08
EPSS Date: 2026-10-20
CWE: CWE-20, CWE-787

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

qualcomm / srv1l_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:srv1l_firmware:-:*:*:*:*:*:*:*
qualcomm / srv1m_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*
qualcomm / srv1h_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*
qualcomm / sa9000p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8775p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8770p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8650p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8620p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8540p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8295p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa8255p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa7775p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*
qualcomm / sa7255p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*
qualcomm / qca6698aq_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
qualcomm / qca6696_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
qualcomm / qca6688aq_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*
qualcomm / qca6595au_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
qualcomm / qca6595_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
qualcomm / qca6574au_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
qualcomm / qamsrv1m_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*
qualcomm / qamsrv1h_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*
qualcomm / qam8775p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
qualcomm / qam8650p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*
qualcomm / qam8620p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qam8620p_firmware:-:*:*:*:*:*:*:*
qualcomm / qam8295p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
qualcomm / qam8255p_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 21-Oct-2026 20:34
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE-2024-53031, and CVE-2024-53032, these flaws could allow attackers to Upstream’s 2026 Automotive Cybersecurity Report Finds Ransomware Incidents Doubled in 2025

CVE (6)

People (1)

MITRE ATT&CK (6)

Vendors (1)

Products (2)

Tools (3)

Industries (6)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.