CVEvulnerability
CVE-2024-43047
CISA Known Exploited Vulnerability
Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Qualcomm Multiple Chipsets
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.
- Added to KEV
- 2024-10-08
- Remediation due
- 2024-10-29
- Ransomware use
- Unknown
- Required action
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- Notes
- https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43047
- Status
- Analyzed
- Published
- 2024-10-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
Memory corruption while maintaining memory maps of HLOS memory.
Affected configurations
• qualcomm fastconnect 6700 firmware
• qualcomm fastconnect 6800 firmware
• qualcomm fastconnect 6900 firmware
• qualcomm fastconnect 7800 firmware
• qualcomm qam8295p firmware
• qualcomm qca6174a firmware
• qualcomm qca6391 firmware
• qualcomm qca6426 firmware
• qualcomm qca6436 firmware
• qualcomm qca6574au firmware
• qualcomm qca6584au firmware
• qualcomm qca6595 firmware
• qualcomm qca6595au firmware
• qualcomm qca6688aq firmware
• qualcomm qca6696 firmware
• qualcomm qca6698aq firmware
• qualcomm qcs410 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6490 firmware
• qualcomm video collaboration vc1 platform firmware
• qualcomm video collaboration vc3 platform firmware
• qualcomm sa4150p firmware
• qualcomm sa4155p firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155p firmware
• qualcomm sa8145p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sa8295p firmware
• qualcomm sd660 firmware
• qualcomm sd865 5g firmware
• qualcomm sg4150p firmware
• qualcomm snapdragon 660 mobile firmware
• qualcomm snapdragon 680 4g mobile firmware
• qualcomm snapdragon 685 4g mobile firmware
• qualcomm snapdragon 8 gen 1 mobile firmware
• qualcomm snapdragon 865 5g mobile firmware
• qualcomm snapdragon 865\+ 5g mobile firmware
• qualcomm snapdragon 870 5g mobile firmware
• qualcomm snapdragon 888 5g mobile firmware
• qualcomm snapdragon 888\+ 5g mobile firmware
• qualcomm snapdragon auto 5g modem-rf firmware
• qualcomm snapdragon auto 5g modem-rf gen 2 firmware
• qualcomm snapdragon x55 5g modem-rf firmware
• qualcomm snapdragon xr2 5g firmware
• qualcomm sw5100 firmware
• qualcomm sw5100p firmware
• qualcomm sxr2130 firmware
• qualcomm wcd9335 firmware
• qualcomm wcd9341 firmware
• qualcomm wcd9370 firmware
• qualcomm wcd9375 firmware
• qualcomm wcd9380 firmware
• qualcomm wcd9385 firmware
• qualcomm wcn3950 firmware
• qualcomm wcn3980 firmware
• qualcomm wcn3988 firmware
• qualcomm wcn3990 firmware
… and 4 more
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html Patch, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047 US Government Resource