[ CVE-2024-43047 · Published 7 Oct 2024 ]
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS <1%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2024-10-08
[ Description ]Official description
Memory corruption while maintaining memory maps of HLOS memory.
CISA: Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 29 Oct 2024): Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- Patch on docs.qualcomm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.htmlPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource