7.8

CVE-2024-43049

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qcc2073 Firmware Version-
   Qualcomm ≫ Qcc2073 Version-
Qualcomm ≫ Qcc2076 Firmware Version-
   Qualcomm ≫ Qcc2076 Version-
Qualcomm ≫ Sc8380xp Firmware Version-
   Qualcomm ≫ Sc8380xp Version-
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.089
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.