First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-43057

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing command in Glink linux.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; C-V2X 9150; CSR8811; FastConnect 6800; FastConnect 6900; FastConnect 7800; FSM10056; FSM20055; FSM20056; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Mar 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-430587.8Memory corruption while processing IOCTL calls.CVE-2024-430597.8Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.CVE-2024-43068.8Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload ma CVE-2024-430607.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.CVE-2024-430617.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in H CVE-2024-430627.8Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.CVE-2024-430635.5information disclosure while invoking the mailbox read API.CVE-2024-430644.7Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.CVE-2024-430657.1Cryptographic issues while generating an asymmetric key pair for RKP use cases.CVE-2024-430667.8Memory corruption while handling file descriptor during listener registration/de-registration.CVE-2024-430677.8Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.CVE-2024-43078.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL q

CVE-2024-43057: High severity, CVSS 7.8 | Vulnix