NetSight
high7.8Known exploited

CVE-2024-43047

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2024-10-08. Federal due date: 2024-10-29.

Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Impact

Memory corruption while maintaining memory maps of HLOS memory.

Affected products

VendorProductAffected versions
QualcommFastconnect 6700 Firmware
All versions
QualcommFastconnect 6800 Firmware
All versions
QualcommFastconnect 6900 Firmware
All versions
QualcommFastconnect 7800 Firmware
All versions
QualcommQam8295p Firmware
All versions
QualcommQca6174a Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6426 Firmware
All versions
QualcommQca6436 Firmware
All versions
QualcommQca6574au Firmware
All versions
QualcommQca6584au Firmware
All versions
QualcommQca6595 Firmware
All versions

Weakness classification

References