CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
First published: Mon Oct 07 2024(Updated: )
Memory corruption while maintaining memory maps of HLOS memory.
Credit: product-security@qualcomm.com product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Multiple Chipsets | ||
| All of | ||
| Qualcomm FastConnect 6700 Firmware | ||
| Qualcomm Fastconnect 6700 | ||
| All of | ||
| Qualcomm FastConnect 6800 Firmware | ||
| Qualcomm FastConnect 6800 Firmware | ||
| All of | ||
| Qualcomm FastConnect 6900 Firmware | ||
| Qualcomm Fastconnect 6900 Firmware | ||
| All of | ||
| Qualcomm FastConnect 7800 Firmware | ||
| Qualcomm Fastconnect 7800 Firmware | ||
| All of | ||
| Qualcomm QAM8295P | ||
| Qualcomm QAM8295P | ||
| All of | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6174A Firmware | ||
| All of | ||
| Qualcomm QCA6391 Firmware | ||
| Qualcomm QCA6391 Firmware | ||
| All of | ||
| Qualcomm QCA6426 Firmware | ||
| Qualcomm QCA6426 Firmware | ||
| All of | ||
| Qualcomm QCA6436 Firmware | ||
| Qualcomm QCA6436 Firmware | ||
| All of | ||
| Qualcomm QCA6574 Firmware | ||
| Qualcomm QCA6574AU | ||
| All of | ||
| Qualcomm QCA6584AU Firmware | ||
| Qualcomm QCA6584AU firmware | ||
| All of | ||
| Qualcomm QCA6595AU Firmware | ||
| Qualcomm QCA6595AU Firmware | ||
| All of | ||
| Qualcomm QCA6595AU Firmware | ||
| Qualcomm QCA6595AU Firmware | ||
| All of | ||
| qualcomm qca6688aq firmware | ||
| Qualcomm QCA6688AQ | ||
| All of | ||
| Qualcomm QCA6696 Firmware | ||
| Qualcomm QCA6696 Firmware | ||
| All of | ||
| Qualcomm QCA6698AQ | ||
| Qualcomm QCA6698AQ Firmware | ||
| All of | ||
| Qualcomm QCS410 Firmware | ||
| Qualcomm QCS410 Firmware | ||
| All of | ||
| Qualcomm QCS610 Firmware | ||
| Qualcomm QCS610 Firmware | ||
| All of | ||
| Qualcomm QCS6490 Firmware | ||
| Qualcomm QCS6490 Firmware | ||
| All of | ||
| Qualcomm Video Collaboration VC1 Platform Firmware | ||
| Qualcomm Video Collaboration VC1 Platform | ||
| All of | ||
| Qualcomm Video Collaboration VC3 Platform Firmware | ||
| Qualcomm Video Collaboration VC3 Platform | ||
| All of | ||
| qualcomm sg4150p Firmware | ||
| qualcomm sg4150p Firmware | ||
| All of | ||
| Qualcomm SA4155P | ||
| Qualcomm SA4155P | ||
| All of | ||
| Qualcomm SA6145P Firmware | ||
| Qualcomm SA6145P Firmware | ||
| All of | ||
| Qualcomm SA6150P Firmware | ||
| Qualcomm SA6150P Firmware | ||
| All of | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155P | ||
| All of | ||
| Qualcomm SA8145P | ||
| Qualcomm SA8145P Firmware | ||
| All of | ||
| Qualcomm SA8150P Firmware | ||
| Qualcomm SA8150P Firmware | ||
| All of | ||
| Qualcomm SA8155 | ||
| Qualcomm SA8155P Firmware | ||
| All of | ||
| Qualcomm SA8195P | ||
| Qualcomm SA8195P Firmware | ||
| All of | ||
| Qualcomm SA8295P Firmware | ||
| Qualcomm SA8295P Firmware | ||
| All of | ||
| Qualcomm Snapdragon 660 Firmware | ||
| Qualcomm Snapdragon 660 | ||
| All of | ||
| Qualcomm Snapdragon 865 5G Firmware | ||
| Qualcomm Snapdragon 865 5G Firmware | ||
| All of | ||
| Qualcomm SG4150P | ||
| Qualcomm SG4150P Firmware | ||
| All of | ||
| Qualcomm Snapdragon 660 Mobile Firmware | ||
| Qualcomm Snapdragon 660 Mobile Firmware | ||
| All of | ||
| Qualcomm Snapdragon 680 4G Firmware | ||
| Qualcomm Snapdragon 680 4G Mobile Platform | ||
| All of | ||
| Qualcomm Snapdragon 685 4G | ||
| Qualcomm Snapdragon 685 4G | ||
| All of | ||
| Qualcomm Snapdragon 8 Gen 1 Firmware | ||
| Qualcomm Snapdragon 8 Gen 1 Mobile Platform | ||
| All of | ||
| Qualcomm Snapdragon 865 5G Mobile | ||
| Qualcomm Snapdragon 865 5G Mobile Firmware | ||
| All of | ||
| Qualcomm Snapdragon 865+ 5G Mobile Firmware | ||
| Qualcomm Snapdragon 865+ 5G Mobile | ||
| All of | ||
| Qualcomm Snapdragon 870 5G Mobile Firmware | ||
| Qualcomm Snapdragon 870 5G Mobile Firmware | ||
| All of | ||
| Qualcomm Snapdragon 888+ 5G Mobile Firmware | ||
| Qualcomm Snapdragon 888 5G Mobile Firmware | ||
| All of | ||
| Qualcomm Snapdragon 888+ 5G Mobile Firmware | ||
| Qualcomm Snapdragon 888+ 5G Mobile | ||
| All of | ||
| Qualcomm Auto 5G Modem-RF Firmware | ||
| Qualcomm Auto 5G Modem-RF Firmware | ||
| All of | ||
| Qualcomm Snapdragon Auto 5G-RF Gen 2 Firmware | ||
| Qualcomm Snapdragon Auto 5G Modem-RF | ||
| All of | ||
| Qualcomm Snapdragon X55 5G Modem-RF System Firmware | ||
| Qualcomm Snapdragon X55 5G Modem-RF System Firmware | ||
| All of | ||
| Qualcomm Snapdragon XR2 5G Platform Firmware | ||
| Qualcomm Snapdragon XR2 5G Firmware | ||
| All of | ||
| Qualcomm SW5100P | ||
| Qualcomm SW5100P | ||
| All of | ||
| Qualcomm SW5100 Firmware | ||
| Qualcomm SW5100 Firmware | ||
| All of | ||
| Qualcomm SXR2130P Firmware | ||
| Qualcomm SXR2130 Firmware | ||
| All of | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| All of | ||
| Qualcomm WCD9341 | ||
| Qualcomm WCD9341 Firmware | ||
| All of | ||
| Qualcomm WCD9370 Firmware | ||
| Qualcomm WCD9370 Firmware | ||
| All of | ||
| Qualcomm WCD9375 | ||
| Qualcomm WCD9375 Firmware | ||
| All of | ||
| Qualcomm WCD9380 | ||
| Qualcomm WCD9380 Firmware | ||
| All of | ||
| Qualcomm WCD9385 | ||
| Qualcomm WCD9385 Firmware | ||
| All of | ||
| Qualcomm WCN3950 Firmware | ||
| Qualcomm WCN3950 Firmware | ||
| All of | ||
| Qualcomm Wcn3980 | ||
| Qualcomm WCN3980 | ||
| All of | ||
| Qualcomm WCN3988 Firmware | ||
| Qualcomm WCN3988 Firmware | ||
| All of | ||
| Qualcomm WCN3990 | ||
| Qualcomm WCN3990 | ||
| All of | ||
| Qualcomm WSA8810 | ||
| Qualcomm WSA8810 Firmware | ||
| All of | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| All of | ||
| Qualcomm WSA8830 | ||
| Qualcomm WSA8830 | ||
| All of | ||
| Qualcomm WSA8835 | ||
| Qualcomm WSA8835 Firmware | ||
Remedy
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.bleepingcomputer.com/news/security/qualcomm-patches-high-severity-zero-day-exploited-in-attacks/
- https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2
- https://nvd.nist.gov/vuln/detail/CVE-2024-43047
- https://www.theregister.com/2024/10/08/qualcomm_patch_spyware/
- https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
- https://www.bleepingcomputer.com/news/security/google-fixes-two-android-zero-days-used-in-targeted-attacks/
- https://www.zdnet.com/article/your-android-device-is-vulnerable-to-attack-and-googles-fix-is-imminent/
- https://www.bleepingcomputer.com/news/security/new-android-novispy-spyware-linked-to-qualcomm-zero-day-bugs/
- https://www.bleepingcomputer.com/news/security/google-fixes-android-kernel-zero-day-exploited-in-attacks/
- https://source.android.com/docs/security/bulletin/2024-11-01 (Advisory)
- https://www.bleepingcomputer.com/news/security/google-fixes-android-zero-days-exploited-in-targeted-attacks/
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the severity of CVE-2024-43047?
CVE-2024-43047 is classified as a high severity vulnerability due to its potential impact on multiple Qualcomm chipsets.
How do I fix CVE-2024-43047?
To fix CVE-2024-43047, users should apply the latest firmware updates provided by Qualcomm for affected chipsets.
What causes the vulnerability identified by CVE-2024-43047?
CVE-2024-43047 is caused by a use-after-free vulnerability resulting from memory corruption in DSP Services while maintaining memory maps of HLOS memory.
Which devices are affected by CVE-2024-43047?
CVE-2024-43047 affects multiple Qualcomm chipsets, including various models in the FastConnect and Snapdragon series.
Is there an exploit available for CVE-2024-43047?
While specific exploits are not disclosed, CVE-2024-43047 has been reported as exploited in attacks, emphasizing the need for immediate remediation.
- agent/type
- agent/first-publish-date
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-43047
- alias/CVE-2024-33066
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/author
- agent/description
- collector/the-register
- source/The Register
- alias/CVE-2024-23369
- alias/CVE-2024-33065
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- alias/CVE-2024-43093
- alias/CVE-2024-38408
- collector/zdnet-article
- source/ZDNet
- agent/last-modified-date
- alias/CVE-2024-49848
- alias/CVE-2024-21455
- alias/CVE-2024-33060
- agent/source
- alias/CVE-2024-53104
- alias/CVE-2024-45569
- agent/severity
- alias/CVE-2024-50302
- agent/references
- agent/event
- agent/trending
- agent/news-ai
- zeroday/true
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/softwarecombine
- collector/android-source
- source/Android
- vendor/qualcomm
- canonical/qualcomm multiple chipsets
- canonical/qualcomm fastconnect 6700 firmware
- canonical/qualcomm fastconnect 6700
- canonical/qualcomm fastconnect 6800 firmware
- canonical/qualcomm fastconnect 6900 firmware
- canonical/qualcomm fastconnect 7800 firmware
- canonical/qualcomm qam8295p
- canonical/qualcomm qca6174a firmware
- canonical/qualcomm qca6391 firmware
- canonical/qualcomm qca6426 firmware
- canonical/qualcomm qca6436 firmware
- canonical/qualcomm qca6574 firmware
- canonical/qualcomm qca6574au
- canonical/qualcomm qca6584au firmware
- canonical/qualcomm qca6595au firmware
- canonical/qualcomm qca6688aq firmware
- canonical/qualcomm qca6688aq
- canonical/qualcomm qca6696 firmware
- canonical/qualcomm qca6698aq
- canonical/qualcomm qca6698aq firmware
- canonical/qualcomm qcs410 firmware
- canonical/qualcomm qcs610 firmware
- canonical/qualcomm qcs6490 firmware
- canonical/qualcomm video collaboration vc1 platform firmware
- canonical/qualcomm video collaboration vc1 platform
- canonical/qualcomm video collaboration vc3 platform firmware
- canonical/qualcomm video collaboration vc3 platform
- canonical/qualcomm sg4150p firmware
- canonical/qualcomm sa4155p
- canonical/qualcomm sa6145p firmware
- canonical/qualcomm sa6150p firmware
- canonical/qualcomm sa6155
- canonical/qualcomm sa6155p
- canonical/qualcomm sa8145p
- canonical/qualcomm sa8145p firmware
- canonical/qualcomm sa8150p firmware
- canonical/qualcomm sa8155
- canonical/qualcomm sa8155p firmware
- canonical/qualcomm sa8195p
- canonical/qualcomm sa8195p firmware
- canonical/qualcomm sa8295p firmware
- canonical/qualcomm snapdragon 660 firmware
- canonical/qualcomm snapdragon 660
- canonical/qualcomm snapdragon 865 5g firmware
- canonical/qualcomm sg4150p
- canonical/qualcomm snapdragon 660 mobile firmware
- canonical/qualcomm snapdragon 680 4g firmware
- canonical/qualcomm snapdragon 680 4g mobile platform
- canonical/qualcomm snapdragon 685 4g
- canonical/qualcomm snapdragon 8 gen 1 firmware
- canonical/qualcomm snapdragon 8 gen 1 mobile platform
- canonical/qualcomm snapdragon 865 5g mobile
- canonical/qualcomm snapdragon 865 5g mobile firmware
- canonical/qualcomm snapdragon 865+ 5g mobile firmware
- canonical/qualcomm snapdragon 865+ 5g mobile
- canonical/qualcomm snapdragon 870 5g mobile firmware
- canonical/qualcomm snapdragon 888+ 5g mobile firmware
- canonical/qualcomm snapdragon 888 5g mobile firmware
- canonical/qualcomm snapdragon 888+ 5g mobile
- canonical/qualcomm auto 5g modem-rf firmware
- canonical/qualcomm snapdragon auto 5g-rf gen 2 firmware
- canonical/qualcomm snapdragon auto 5g modem-rf
- canonical/qualcomm snapdragon x55 5g modem-rf system firmware
- canonical/qualcomm snapdragon xr2 5g platform firmware
- canonical/qualcomm snapdragon xr2 5g firmware
- canonical/qualcomm sw5100p
- canonical/qualcomm sw5100 firmware
- canonical/qualcomm sxr2130p firmware
- canonical/qualcomm sxr2130 firmware
- canonical/qualcomm wcd9335 firmware
- canonical/qualcomm wcd9341
- canonical/qualcomm wcd9341 firmware
- canonical/qualcomm wcd9370 firmware
- canonical/qualcomm wcd9375
- canonical/qualcomm wcd9375 firmware
- canonical/qualcomm wcd9380
- canonical/qualcomm wcd9380 firmware
- canonical/qualcomm wcd9385
- canonical/qualcomm wcd9385 firmware
- canonical/qualcomm wcn3950 firmware
- canonical/qualcomm wcn3980
- canonical/qualcomm wcn3988 firmware
- canonical/qualcomm wcn3990
- canonical/qualcomm wsa8810
- canonical/qualcomm wsa8810 firmware
- canonical/qualcomm wsa8815 firmware
- canonical/qualcomm wsa8830
- canonical/qualcomm wsa8835
- canonical/qualcomm wsa8835 firmware
- vendor/google