CVE-2024-43061

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Mar 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-430627.8Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.CVE-2024-430635.5information disclosure while invoking the mailbox read API.CVE-2024-430644.7Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.CVE-2024-430657.1Cryptographic issues while generating an asymmetric key pair for RKP use cases.CVE-2024-430667.8Memory corruption while handling file descriptor during listener registration/de-registration.CVE-2024-430677.8Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.CVE-2024-43078.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL q CVE-2024-430777.8In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local es CVE-2024-43088.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL q CVE-2024-430807.8In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to CVE-2024-430817.8In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod CVE-2024-430825.5In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to