First published: Mon Dec 02 2024(Updated: )
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Qualcomm Fastconnect 6700 Firmware | ||
Qualcomm Fastconnect 6700 | ||
All of | ||
Qualcomm Fastconnect 6900 Firmware | ||
Qualcomm Fastconnect 6900 | ||
All of | ||
Qualcomm Fastconnect 7800 Firmware | ||
Qualcomm Fastconnect 7800 | ||
All of | ||
Qualcomm Qcc2073 Firmware | ||
Qualcomm Qcc2073 | ||
All of | ||
Qualcomm Qcc2076 Firmware | ||
Qualcomm Qcc2076 | ||
All of | ||
Qualcomm Sc8380xp Firmware | ||
Qualcomm Sc8380xp | ||
All of | ||
Qualcomm Sdm429w Firmware | ||
Qualcomm Sdm429w | ||
All of | ||
Qualcomm Snapdragon 429 Mobile Platform Firmware | ||
Qualcomm Snapdragon 429 Mobile Platform | ||
All of | ||
Qualcomm Snapdragon 7c\+ Gen 3 Compute Firmware | ||
Qualcomm Snapdragon 7c\+ Gen 3 Compute | ||
All of | ||
Qualcomm Snapdragon 8cx Gen 3 Compute Platform Firmware | ||
Qualcomm Snapdragon 8cx Gen 3 Compute Platform | ||
All of | ||
Qualcomm Wcd9380 Firmware | ||
Qualcomm Wcd9380 | ||
All of | ||
Qualcomm Wcd9385 Firmware | ||
Qualcomm Wcd9385 | ||
All of | ||
Qualcomm Wcn3620 Firmware | ||
Qualcomm Wcn3620 | ||
All of | ||
Qualcomm Wcn3660b Firmware | ||
Qualcomm Wcn3660b | ||
All of | ||
Qualcomm Wsa8830 Firmware | ||
Qualcomm Wsa8830 | ||
All of | ||
Qualcomm Wsa8835 Firmware | ||
Qualcomm Wsa8835 | ||
All of | ||
Qualcomm Wsa8840 Firmware | ||
Qualcomm Wsa8840 | ||
All of | ||
Qualcomm Wsa8845 Firmware | ||
Qualcomm Wsa8845 | ||
All of | ||
Qualcomm Wsa8845h Firmware | ||
Qualcomm Wsa8845h |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2024-43049 has not been explicitly stated, but it involves memory corruption, which can lead to significant security risks.
To fix CVE-2024-43049, users should apply the latest firmware updates provided by Qualcomm for the affected devices.
CVE-2024-43049 affects various Qualcomm firmware products, including Fastconnect 6700, 6900, 7800, Qcc2073, and others.
CVE-2024-43049 is a memory corruption vulnerability that occurs while invoking IOCTL calls from user space in the WLAN driver.
There is currently no public information indicating that CVE-2024-43049 is being actively exploited.