HIGH

CVE-2024-43047

Qualcomm Fastconnect 6700 Firmware 2024-10-07 CVSS v3.1

CVSS

7.8

KEV

Description

Memory corruption while maintaining memory maps of HLOS memory.

Summary dbcve.org

Memory corruption vulnerability in the memory map maintenance functionality of a High Level Operating System (HLOS). The issue occurs when handling memory maps, potentially allowing an attacker to corrupt memory regions through improper memory management operations.

Mitigation

Apply vendor-provided patches for the affected HLOS component once available. Prioritize patching in high-risk environments given the CVSS 7.8 severity rating indicating potential for local privilege escalation or system compromise.

Patch Commit

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

0.67%

Probability of exploitation in next 30 days

50.3th percentile

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE