CVE-2024-49830: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Published May 6, 2025
·Updated
Memory corruption while processing an IOCTL call to set mixer controls.
Affected Software
24 affected components
All of the following
Qualcomm Qca6574au Firmware
QUALCOMM QCA6574AU
All of the following
QUALCOMM Qca6595au Firmware
QUALCOMM Qca6595au
All of the following
QUALCOMM Qca6678aq Firmware
QUALCOMM Qca6678aq
All of the following
QUALCOMM Qca6688aq Firmware
QUALCOMM Qca6688aq
All of the following
QUALCOMM Qca6698aq Firmware
QUALCOMM Qca6698aq
All of the following
QUALCOMM Qca9367 Firmware
QUALCOMM Qca9367
All of the following
QUALCOMM Qca9377 Firmware
QUALCOMM QCA9377
All of the following
QUALCOMM Sdm429w Firmware
QUALCOMM Sdm429w
All of the following
QUALCOMM Snapdragon 429 Mobile Firmware
QUALCOMM Snapdragon 429 Mobile
All of the following
QUALCOMM Snapdragon Auto 5g Modem-rf Gen 2 Firmware
QUALCOMM Snapdragon Auto 5g Modem-rf Gen 2
All of the following
QUALCOMM Wcn3620 Firmware
QUALCOMM Wcn3620
All of the following
Qualcomm Wcn3660b Firmware
QUALCOMM Wcn3660b
Remediation
Event History
May 6, 2025
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-49830?
The severity of CVE-2024-49830 is classified as high due to potential memory corruption issues.
2
How do I fix CVE-2024-49830?
To mitigate CVE-2024-49830, update the firmware of the affected Qualcomm devices as per vendor recommendation.
3
Which Qualcomm devices are affected by CVE-2024-49830?
CVE-2024-49830 affects several Qualcomm firmware versions, including QCA6574AU, QCA6595AU, QCA6678AQ, QCA6688AQ, and others.
4
What impact does CVE-2024-49830 have on system security?
CVE-2024-49830 could potentially allow attackers to execute arbitrary code or crash the device due to memory corruption.
5
Is there a public patch available for CVE-2024-49830?
Yes, a public patch for CVE-2024-49830 is available for the affected Qualcomm devices; please refer to Qualcomm's security bulletin for details.