VDB

CISA-2024-43052

CISA-2024-43052 PUBLISHED CVSS 7.8 HIGH

Reported by qualcomm · Published December 2, 2024

Memory corruption while processing API calls to NPU with invalid input.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8017, APQ8037, FastConnect 6800
qualcommsnapdragon_435_mobile_platform_firmware0, 0
qualcommsnapdragon_425_mobile_platform_firmware0, 0
qualcommwcd9385_firmware0, 0
qualcommqcm2150_firmware0, 0
qualcommfastconnect_6900_firmware0, 0
qualcommwcn7860_firmware0, 0
qualcommfastconnect_7800_firmware0, 0
qualcommsm8750_firmware0, 0
qualcommqet4101_firmware0, 0
qualcommsc8380xp_firmware0, 0
qualcommqcn9274_firmware0, 0
qualcommwcn3680_firmware0, 0
qualcommsnapdragon_xr2_5g_platform_firmware0, 0
qualcommqualcomm_video_collaboration_vc5_platform_firmware0, 0
qualcommsdx55_firmware0, 0
qualcommmsm8909w_firmware0, 0
qualcommsm8750p_firmware0, 0
qualcommsnapdragon_212_mobile_platform_firmware0, 0
qualcommsnapdragon_210_processor_firmware0, 0

…and 68 more

Timeline

  • Dec 2, 2024 CVE Published
  • Dec 3, 2024 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›