CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Oct 29, 2024

High

CISA KEV

CVE-2024-43047

Qualcomm—Multiple Chipsets

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.

Required Action

https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43047

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Oct 8, 2024
KEV Added: Oct 8, 2024
Due Date: Oct 29, 2024
Related Articles: 0

Vendor

Qualcomm

Multiple Chipsets