CVE-2024-43047

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Memory corruption while maintaining memory maps of HLOS memory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6174A; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6688AQ; QCA6696; QCA6698AQ; QCS410; QCS610; QCS6490; Qualcomm Video Collaboration VC1 Platform
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6688aq_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs610_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqualcomm_video_collaboration_vc1_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommsa4150p_firmware<= *
qualcommsa4155p_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsa8295p_firmware<= *
qualcommsd660_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsg4150p_firmware<= *
qualcommsnapdragon_660_mobile_platform_firmware<= *
qualcommsnapdragon_680_4g_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_865_5g_mobile_platform_firmware<= *
qualcommsnapdragon_888_5g_mobile_platform_firmware<= *
qualcommsnapdragon_auto_5g_modem-rf_firmware<= *
qualcommsnapdragon_auto_5g_modem-rf_gen_2_firmware<= *
qualcommsnapdragon_x55_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_xr2_5g_platform_firmware<= *
qualcommsw5100_firmware<= *
qualcommsw5100p_firmware<= *
qualcommsxr2130_firmware<= *
qualcommwcd9335_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9370_firmware<= *

References

Timeline

Published
Oct 7, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Oct 8, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-430487.8Memory corruption when invalid input is passed to invoke GPU Headroom API call.CVE-2024-430497.8Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.CVE-2024-43056.8The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block optioCVE-2024-430507.8Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.CVE-2024-430515.5Information disclosure while deriving keys for a session for any Widevine use case.CVE-2024-430527.8Memory corruption while processing API calls to NPU with invalid input.CVE-2024-430537.8Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.CVE-2024-430557.8Memory corruption while processing camera use case IOCTL call.CVE-2024-430566.5Transient DOS during hypervisor virtual I/O operation in a virtual machine.CVE-2024-430577.8Memory corruption while processing command in Glink linux.CVE-2024-430587.8Memory corruption while processing IOCTL calls.CVE-2024-430597.8Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
CVE-2024-43047: High severity, CVSS 7.8 | Vulnix