CVE-2024-43066: Use After Free in HLOS
Memory corruption while handling file descriptor during listener registration/de-registration.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2025-04-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43066?
CVE-2024-43066 has been rated as high severity due to the potential for memory corruption that could be exploited.
How do I fix CVE-2024-43066?
To fix CVE-2024-43066, ensure that your Android device is updated to the latest security patch provided by your vendor.
What does CVE-2024-43066 affect?
CVE-2024-43066 specifically affects Google Android devices that handle file descriptors during listener registration or deregistration.
What are the potential impacts of CVE-2024-43066?
Exploitation of CVE-2024-43066 could lead to application crashes or unauthorized access to sensitive data due to memory corruption.
Has CVE-2024-43066 been publicly disclosed?
Yes, CVE-2024-43066 has been publicly disclosed in security bulletins as of April 2025.