CVE-2024-43051

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Information disclosure while deriving keys for a session for any Widevine use case.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-430527.8Memory corruption while processing API calls to NPU with invalid input.CVE-2024-430537.8Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.CVE-2024-430557.8Memory corruption while processing camera use case IOCTL call.CVE-2024-430566.5Transient DOS during hypervisor virtual I/O operation in a virtual machine.CVE-2024-430577.8Memory corruption while processing command in Glink linux.CVE-2024-430587.8Memory corruption while processing IOCTL calls.CVE-2024-430597.8Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.CVE-2024-43068.8Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload maCVE-2024-430607.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.CVE-2024-430617.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HCVE-2024-430627.8Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.CVE-2024-430635.5information disclosure while invoking the mailbox read API.
CVE-2024-43051: Medium severity, CVSS 5.5 | Vulnix