CVE-2024-43047

Warnung

EPSS 1.75%
Veröffentlicht 07.10.2024 13:15:15
Zuletzt bearbeitet 28.10.2025 13:47:47
Quelle product-security@qualcomm.com
CVE-Watchlists
Login
Unerledigt
Login

Use After Free in DSP Service

Memory corruption while maintaining memory maps of HLOS memory.

Betroffene Produkte Warnungen 1 Metriken 2 CWE 1 Referenzen 5

NVD 62 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Fastconnect 6700 Firmware Version-

Qualcomm ≫ Fastconnect 6700 Version-

Qualcomm ≫ Fastconnect 6800 Firmware Version-

Qualcomm ≫ Fastconnect 6800 Version-

Qualcomm ≫ Fastconnect 6900 Firmware Version-

Qualcomm ≫ Fastconnect 6900 Version-

Qualcomm ≫ Fastconnect 7800 Firmware Version-

Qualcomm ≫ Fastconnect 7800 Version-

Qualcomm ≫ Qam8295p Firmware Version-

Qualcomm ≫ Qam8295p Version-

Qualcomm ≫ Qca6174a Firmware Version-

Qualcomm ≫ Qca6174a Version-

Qualcomm ≫ Qca6391 Firmware Version-

Qualcomm ≫ Qca6391 Version-

Qualcomm ≫ Qca6426 Firmware Version-

Qualcomm ≫ Qca6426 Version-

Qualcomm ≫ Qca6436 Firmware Version-

Qualcomm ≫ Qca6436 Version-

Qualcomm ≫ Qca6574au Firmware Version-

Qualcomm ≫ Qca6574au Version-

Qualcomm ≫ Qca6584au Firmware Version-

Qualcomm ≫ Qca6584au Version-

Qualcomm ≫ Qca6595 Firmware Version-

Qualcomm ≫ Qca6595 Version-

Qualcomm ≫ Qca6595au Firmware Version-

Qualcomm ≫ Qca6595au Version-

Qualcomm ≫ Qca6688aq Firmware Version-

Qualcomm ≫ Qca6688aq Version-

Qualcomm ≫ Qca6696 Firmware Version-

Qualcomm ≫ Qca6696 Version-

Qualcomm ≫ Qca6698aq Firmware Version-

Qualcomm ≫ Qca6698aq Version-

Qualcomm ≫ Qcs410 Firmware Version-

Qualcomm ≫ Qcs410 Version-

Qualcomm ≫ Qcs610 Firmware Version-

Qualcomm ≫ Qcs610 Version-

Qualcomm ≫ Qcs6490 Firmware Version-

Qualcomm ≫ Qcs6490 Version-

Qualcomm ≫ Video Collaboration Vc1 Platform Firmware Version-

Qualcomm ≫ Video Collaboration Vc1 Platform Version-

Qualcomm ≫ Video Collaboration Vc3 Platform Firmware Version-

Qualcomm ≫ Video Collaboration Vc3 Platform Version-

Qualcomm ≫ Sa4150p Firmware Version-

Qualcomm ≫ Sa4150p Version-

Qualcomm ≫ Sa4155p Firmware Version-

Qualcomm ≫ Sa4155p Version-

Qualcomm ≫ Sa6145p Firmware Version-

Qualcomm ≫ Sa6145p Version-

Qualcomm ≫ Sa6150p Firmware Version-

Qualcomm ≫ Sa6150p Version-

Qualcomm ≫ Sa6155p Firmware Version-

Qualcomm ≫ Sa6155p Version-

Qualcomm ≫ Sa8145p Firmware Version-

Qualcomm ≫ Sa8145p Version-

Qualcomm ≫ Sa8150p Firmware Version-

Qualcomm ≫ Sa8150p Version-

Qualcomm ≫ Sa8155p Firmware Version-

Qualcomm ≫ Sa8155p Version-

Qualcomm ≫ Sa8195p Firmware Version-

Qualcomm ≫ Sa8195p Version-

Qualcomm ≫ Sa8295p Firmware Version-

Qualcomm ≫ Sa8295p Version-

Qualcomm ≫ Sd660 Firmware Version-

Qualcomm ≫ Sd660 Version-

Qualcomm ≫ Sd865 5g Firmware Version-

Qualcomm ≫ Sd865 5g Version-

Qualcomm ≫ Sg4150p Firmware Version-

Qualcomm ≫ Sg4150p Version-

Qualcomm ≫ Snapdragon 660 Mobile Firmware Version-

Qualcomm ≫ Snapdragon 660 Mobile Version-

Qualcomm ≫ Snapdragon 680 4g Mobile Firmware Version-

Qualcomm ≫ Snapdragon 680 4g Mobile Version-

Qualcomm ≫ Snapdragon 685 4g Mobile Firmware Version-

Qualcomm ≫ Snapdragon 685 4g Mobile Version-

Qualcomm ≫ Snapdragon 8 Gen 1 Mobile Firmware Version-

Qualcomm ≫ Snapdragon 8 Gen 1 Mobile Version-

Qualcomm ≫ Snapdragon 865 5g Mobile Firmware Version-

Qualcomm ≫ Snapdragon 865 5g Mobile Version-

Qualcomm ≫ Snapdragon 870 5g Mobile Firmware Version-

Qualcomm ≫ Snapdragon 870 5g Mobile Version-

Qualcomm ≫ Snapdragon 888 5g Mobile Firmware Version-

Qualcomm ≫ Snapdragon 888 5g Mobile Version-

Qualcomm ≫ Snapdragon Auto 5g Modem-rf Firmware Version-

Qualcomm ≫ Snapdragon Auto 5g Modem-rf Version-

Qualcomm ≫ Snapdragon Auto 5g Modem-rf Gen 2 Firmware Version-

Qualcomm ≫ Snapdragon Auto 5g Modem-rf Gen 2 Version-

Qualcomm ≫ Snapdragon X55 5g Modem-rf Firmware Version-

Qualcomm ≫ Snapdragon X55 5g Modem-rf Version-

Qualcomm ≫ Snapdragon Xr2 5g Firmware Version-

Qualcomm ≫ Snapdragon Xr2 5g Version-

Qualcomm ≫ Sw5100 Firmware Version-

Qualcomm ≫ Sw5100 Version-

Qualcomm ≫ Sw5100p Firmware Version-

Qualcomm ≫ Sw5100p Version-

Qualcomm ≫ Sxr2130 Firmware Version-

Qualcomm ≫ Sxr2130 Version-

Qualcomm ≫ Wcd9335 Firmware Version-

Qualcomm ≫ Wcd9335 Version-

Qualcomm ≫ Wcd9341 Firmware Version-

Qualcomm ≫ Wcd9341 Version-

Qualcomm ≫ Wcd9370 Firmware Version-

Qualcomm ≫ Wcd9370 Version-

Qualcomm ≫ Wcd9375 Firmware Version-

Qualcomm ≫ Wcd9375 Version-

Qualcomm ≫ Wcd9380 Firmware Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Firmware Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wcn3950 Firmware Version-

Qualcomm ≫ Wcn3950 Version-

Qualcomm ≫ Wcn3980 Firmware Version-

Qualcomm ≫ Wcn3980 Version-

Qualcomm ≫ Wcn3988 Firmware Version-

Qualcomm ≫ Wcn3988 Version-

Qualcomm ≫ Wcn3990 Firmware Version-

Qualcomm ≫ Wcn3990 Version-

Qualcomm ≫ Wsa8810 Firmware Version-

Qualcomm ≫ Wsa8810 Version-

Qualcomm ≫ Wsa8815 Firmware Version-

Qualcomm ≫ Wsa8815 Version-

Qualcomm ≫ Wsa8830 Firmware Version-

Qualcomm ≫ Wsa8830 Version-

Qualcomm ≫ Wsa8835 Firmware Version-

Qualcomm ≫ Wsa8835 Version-

08.10.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Schwachstelle

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.

Beschreibung

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.75%	0.821

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
product-security@qualcomm.com	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

Patch

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2024-43047

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-43047

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-43047

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-43047

08.10.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog