CVE-2024-43048

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6200; FastConnect 6900; FastConnect 7800; QCM4325; QCM8550; SDM429W; SG4150P; SM4635; SM8550P; SM8635; SM8750; SM8750P; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 429 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform (SM4350-AC); Snapdragon 662 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform (SM6225-AD)
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqcm4325_firmware<= *
qualcommqcm8550_firmware<= *
qualcommsdm429w_firmware<= *
qualcommsg4150p_firmware<= *
qualcommsm4635_firmware<= *
qualcommsm8550p_firmware<= *
qualcommsm8635_firmware<= *
qualcommsm8750_firmware<= *
qualcommsm8750p_firmware<= *
qualcommsnapdragon_4_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_429_mobile_platform_firmware<= *
qualcommsnapdragon_460_mobile_platform_firmware<= *
qualcommsnapdragon_480_5g_mobile_platform_firmware<= *
qualcommsnapdragon_662_mobile_platform_firmware<= *
qualcommsnapdragon_680_4g_mobile_platform_firmware<= *
qualcommsnapdragon_695_5g_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_2_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_3_mobile_platform_firmware<= *
qualcommvision_intelligence_400_platform_firmware<= *
qualcommwcd9335_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9375_firmware<= *
qualcommwcd9378_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcd9385_firmware<= *
qualcommwcd9390_firmware<= *
qualcommwcd9395_firmware<= *
qualcommwcn3620_firmware<= *
qualcommwcn3660b_firmware<= *
qualcommwcn3950_firmware<= *
qualcommwcn3988_firmware<= *
qualcommwcn3990_firmware<= *
qualcommwcn6755_firmware<= *
qualcommwcn7860_firmware<= *
qualcommwcn7861_firmware<= *
qualcommwcn7880_firmware<= *
qualcommwcn7881_firmware<= *
qualcommwsa8810_firmware<= *
qualcommwsa8815_firmware<= *
qualcommwsa8830_firmware<= *
qualcommwsa8832_firmware<= *
qualcommwsa8835_firmware<= *
qualcommwsa8840_firmware<= *
qualcommwsa8845_firmware<= *
qualcommwsa8845h_firmware<= *

References

Timeline

Published
Dec 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-430497.8Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.CVE-2024-43056.8The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block optioCVE-2024-430507.8Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.CVE-2024-430515.5Information disclosure while deriving keys for a session for any Widevine use case.CVE-2024-430527.8Memory corruption while processing API calls to NPU with invalid input.CVE-2024-430537.8Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.CVE-2024-430557.8Memory corruption while processing camera use case IOCTL call.CVE-2024-430566.5Transient DOS during hypervisor virtual I/O operation in a virtual machine.CVE-2024-430577.8Memory corruption while processing command in Glink linux.CVE-2024-430587.8Memory corruption while processing IOCTL calls.CVE-2024-430597.8Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.CVE-2024-43068.8Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload ma
CVE-2024-43048: High severity, CVSS 7.8 | Vulnix