CVE-2024-43064: Permissions, Privileges, and Access Controls issue in Automotive OS Platform
Published Jan 6, 2025
·Updated
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
Affected Software
60 affected components
All of the following
QUALCOMM Qam8255p Firmware
QUALCOMM Qam8255p
All of the following
QUALCOMM Qam8295p Firmware
QUALCOMM Qam8295p
All of the following
QUALCOMM Qam8620p Firmware
QUALCOMM Qam8620p
All of the following
QUALCOMM Qam8650p Firmware
QUALCOMM Qam8650p
All of the following
QUALCOMM Qam8775p Firmware
QUALCOMM Qam8775p
All of the following
QUALCOMM Qamsrv1h Firmware
QUALCOMM Qamsrv1h
All of the following
QUALCOMM Qamsrv1m Firmware
QUALCOMM Qamsrv1m
All of the following
Qualcomm Qca6574au Firmware
QUALCOMM QCA6574AU
All of the following
QUALCOMM Qca6595 Firmware
QUALCOMM Qca6595
All of the following
QUALCOMM Qca6595au Firmware
QUALCOMM Qca6595au
All of the following
QUALCOMM Qca6688aq Firmware
QUALCOMM Qca6688aq
All of the following
QUALCOMM Qca6696 Firmware
QUALCOMM Qca6696
All of the following
QUALCOMM Qca6698aq Firmware
QUALCOMM Qca6698aq
All of the following
QUALCOMM Sa7255p Firmware
QUALCOMM Sa7255p
All of the following
QUALCOMM Sa7775p Firmware
QUALCOMM Sa7775p
All of the following
QUALCOMM Sa8255p Firmware
QUALCOMM Sa8255p
All of the following
QUALCOMM Sa8295p Firmware
QUALCOMM Sa8295p
All of the following
QUALCOMM Sa8540p Firmware
QUALCOMM Sa8540p
All of the following
QUALCOMM Sa8620p Firmware
QUALCOMM Sa8620p
All of the following
QUALCOMM Sa8650p Firmware
QUALCOMM Sa8650p
All of the following
QUALCOMM Sa8770p Firmware
QUALCOMM Sa8770p
All of the following
QUALCOMM Sa8775p Firmware
QUALCOMM Sa8775p
All of the following
QUALCOMM Sa9000p Firmware
QUALCOMM Sa9000p
All of the following
QUALCOMM Sdm429w Firmware
QUALCOMM Sdm429w
All of the following
QUALCOMM Snapdragon 429 Mobile Firmware
QUALCOMM Snapdragon 429 Mobile
All of the following
QUALCOMM Srv1h Firmware
QUALCOMM Srv1h
All of the following
QUALCOMM Srv1l Firmware
QUALCOMM Srv1l
All of the following
QUALCOMM Srv1m Firmware
QUALCOMM Srv1m
All of the following
QUALCOMM Wcn3620 Firmware
QUALCOMM Wcn3620
All of the following
Qualcomm Wcn3660b Firmware
QUALCOMM Wcn3660b
Event History
Jan 6, 2025
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43064?
CVE-2024-43064 is classified as a high-severity vulnerability due to its potential for uncontrollable resource consumption.
2
How do I fix CVE-2024-43064?
To address CVE-2024-43064, users should update to the latest firmware version provided by Qualcomm.
3
What systems are affected by CVE-2024-43064?
CVE-2024-43064 affects various Qualcomm firmware, including QAM8255P, QAM8295P, and several others listed in the advisory.
4
What causes CVE-2024-43064?
CVE-2024-43064 is caused by uncontrolled resource consumption when accessing global registers through the SMMU.
5
What are the potential impacts of CVE-2024-43064?
The potential impacts of CVE-2024-43064 include system instability and denial of service due to excessive resource usage.