CVE-2024-49848: Use After Free in DSP Service
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2025-04-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49848?
CVE-2024-49848 is classified as a high severity vulnerability due to potential memory corruption issues.
How do I fix CVE-2024-49848?
To mitigate CVE-2024-49848, update the affected Qualcomm firmware as per the respective security bulletin guidance.
What software is affected by CVE-2024-49848?
CVE-2024-49848 affects various Qualcomm firmware versions utilized across multiple devices.
What kind of attack does CVE-2024-49848 enable?
CVE-2024-49848 could potentially allow an attacker to execute arbitrary code via compromised IOCTL calls.
What is the impact of CVE-2024-49848 on device security?
The impact of CVE-2024-49848 can result in unauthorized access and control over affected devices, significantly compromising security.