CVE-2024-43047

Qualcomm, Inc. Snapdragon, qualcomm fastconnect_6700_firmware, qualcomm fastconnect_6800_firmware

Published 7 Oct 2024 · updated 17 Jun 2026 · Analyzed

7.8 High · CVSS 3.1, qualcomm.com

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 8 Oct 2024, with a remediation deadline of 29 Oct 2024 for US federal agencies.

Required action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Description

Memory corruption while maintaining memory maps of HLOS memory.

References

docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html · Patch, Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047 · US Government Resource