CVE-2024-43060

Katalog CVE

CVSS 7.8 · High EPSS 0,12%

Kerentanan Use of Out-of-range Pointer Offset pada qualcomm ar8035 firmware, qualcomm fastconnect 6900 firmware +39 lainnya. Skor CVSS 3.1 7.8 (High) menurut qualcomm.com.

Deskripsi (NVD)

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

Rincian

Terbit di NVD

3 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber qualcomm.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-823: Use of Out-of-range Pointer Offset
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html patch · advisory vendor