CVE-2024-43060

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-430617.8Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HCVE-2024-430627.8Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.CVE-2024-430635.5information disclosure while invoking the mailbox read API.CVE-2024-430644.7Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.CVE-2024-430657.1Cryptographic issues while generating an asymmetric key pair for RKP use cases.CVE-2024-430667.8Memory corruption while handling file descriptor during listener registration/de-registration.CVE-2024-430677.8Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.CVE-2024-43078.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL qCVE-2024-430777.8In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local esCVE-2024-43088.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL qCVE-2024-430807.8In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to CVE-2024-430817.8In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod