peter bassill · operator
$ cve CVE-2024-43047 JSON

CVE-2024-43047 KEV

7.8
HIGH · CVSS 3.1 · EPSS 0.7% (pctl 50)

Patch first

On CISA KEV — known exploited in the wild, due 2024-10-29.

Description

Memory corruption while maintaining memory maps of HLOS memory.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.67% — more likely to be exploited than 50% of all CVEs
WeaknessCWE-416
On CISA KEVyes — remediate by 2024-10-29
Public exploitnone known
Published2024-10-07
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Use-After-Free Vulnerability
Added2024-10-08
Due2024-10-29
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommfastconnect 6700
qualcommfastconnect 6700 firmware
qualcommfastconnect 6800
qualcommfastconnect 6800 firmware
qualcommfastconnect 6900
qualcommfastconnect 6900 firmware
qualcommfastconnect 7800
qualcommfastconnect 7800 firmware
qualcommqam8295p
qualcommqam8295p firmware
qualcommqca6174a
qualcommqca6174a firmware
qualcommqca6391
qualcommqca6391 firmware
qualcommqca6426
qualcommqca6426 firmware
qualcommqca6436
qualcommqca6436 firmware
qualcommqca6574au
qualcommqca6574au firmware
qualcommqca6584au
qualcommqca6584au firmware
qualcommqca6595
qualcommqca6595 firmware
qualcommqca6595au
qualcommqca6595au firmware
qualcommqca6688aq
qualcommqca6688aq firmware
qualcommqca6696
qualcommqca6696 firmware
qualcommqca6698aq
qualcommqca6698aq firmware
qualcommqcs410
qualcommqcs410 firmware
qualcommqcs610
qualcommqcs610 firmware
qualcommqcs6490
qualcommqcs6490 firmware
qualcommvideo collaboration vc1 platform
qualcommvideo collaboration vc1 platform firmware

References

→ the Explorer  ·  watch your stack  ·  NVD