ГлавнаяУязвимости → CVE-2024-43049
7.8высокая

CVE-2024-43049

Описание

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Затрагиваемое ПО
Qualcomm Fastconnect 6700 firmwareQualcomm Fastconnect 6700Qualcomm Fastconnect 6900 firmwareQualcomm Fastconnect 6900Qualcomm Fastconnect 7800 firmwareQualcomm Fastconnect 7800Qualcomm Qcc2073 firmwareQualcomm Qcc2073Qualcomm Qcc2076 firmwareQualcomm Qcc2076Qualcomm Sc8380xp firmwareQualcomm Sc8380xpQualcomm Sdm429w firmwareQualcomm Sdm429wQualcomm Snapdragon 429 mobile platform firmwareQualcomm Snapdragon 429 mobile platformQualcomm Snapdragon 7c\+ gen 3 compute firmwareQualcomm Snapdragon 7c\+ gen 3 computeQualcomm Snapdragon 8cx gen 3 compute platform firmwareQualcomm Snapdragon 8cx gen 3 compute platformQualcomm Wcd9380 firmwareQualcomm Wcd9380Qualcomm Wcd9385 firmwareQualcomm Wcd9385Qualcomm Wcn3620 firmware
CVSS
Балл7.8 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html