ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2024-43047

بهره‌برداری فعال
Qualcomm Snapdragonqualcomm fastconnect_6700_firmwarequalcomm fastconnect_6800_firmwarequalcomm fastconnect_6900_firmwarequalcomm fastconnect_7800_firmwarequalcomm qam8295p_firmware

Use After Free in DSP Service

CVSS 3.1
7.8بالا

شرح رسمی (انگلیسی)

Memory corruption while maintaining memory maps of HLOS memory.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon FastConnect 6700 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QAM8295P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6174A CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6391 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6426 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6436 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6574AU CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6584AU CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6595 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6595AU CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6688AQ CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6696 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6698AQ CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS410 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS610 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS6490 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA4150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA4155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6145P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8145P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8195P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8295P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SD660 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SD865 5G CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SG4150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2130 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 660 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 680 4G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 685 4G Mobile Platform (SM6225-AD) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 865 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 865+ 5G Mobile Platform (SM8250-AB) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 870 5G Mobile Platform (SM8250-AC) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 888 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 888+ 5G Mobile Platform (SM8350-AC) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF Gen 2 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon X55 5G Modem-RF System CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon XR2 5G Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9335 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9341 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3980 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3990 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
qualcomm fastconnect_6700_firmware همه CISA ADP / Vulnrichment
qualcomm fastconnect_6800_firmware همه CISA ADP / Vulnrichment
qualcomm fastconnect_6900_firmware همه CISA ADP / Vulnrichment
qualcomm fastconnect_7800_firmware همه CISA ADP / Vulnrichment
qualcomm qam8295p_firmware همه CISA ADP / Vulnrichment
qualcomm qca6174a_firmware همه CISA ADP / Vulnrichment
qualcomm qca6391_firmware همه CISA ADP / Vulnrichment
qualcomm qca6426_firmware همه CISA ADP / Vulnrichment
qualcomm qca6436_firmware همه CISA ADP / Vulnrichment
qualcomm qca6574au_firmware همه CISA ADP / Vulnrichment
qualcomm qca6584au_firmware همه CISA ADP / Vulnrichment
qualcomm qca6595_firmware همه CISA ADP / Vulnrichment
qualcomm qca6595au_firmware همه CISA ADP / Vulnrichment
qualcomm qca6688aq_firmware همه CISA ADP / Vulnrichment
qualcomm qca6696_firmware همه CISA ADP / Vulnrichment
qualcomm qca6698aq_firmware همه CISA ADP / Vulnrichment
qualcomm qcs410_firmware همه CISA ADP / Vulnrichment
qualcomm qcs610_firmware همه CISA ADP / Vulnrichment
qualcomm qcs6490_firmware همه CISA ADP / Vulnrichment
qualcomm qualcomm_video_collaboration_vc1_platform_firmware همه CISA ADP / Vulnrichment
qualcomm qualcomm_video_collaboration_vc3_platform_firmware همه CISA ADP / Vulnrichment
qualcomm sa4150p_firmware همه CISA ADP / Vulnrichment
qualcomm sa4155p_firmware همه CISA ADP / Vulnrichment
qualcomm sa6145p_firmware همه CISA ADP / Vulnrichment
qualcomm sa6150p_firmware همه CISA ADP / Vulnrichment
qualcomm sa6155p_firmware همه CISA ADP / Vulnrichment
qualcomm sa8145p_firmware همه CISA ADP / Vulnrichment
qualcomm sa8150p_firmware همه CISA ADP / Vulnrichment
qualcomm sa8155p_firmware همه CISA ADP / Vulnrichment
qualcomm sa8195p_firmware همه CISA ADP / Vulnrichment
qualcomm sa8295p_firmware همه CISA ADP / Vulnrichment
qualcomm sd660_firmware همه CISA ADP / Vulnrichment
qualcomm sd865_5g_firmware همه CISA ADP / Vulnrichment
qualcomm sg4150p_firmware همه CISA ADP / Vulnrichment
qualcomm sm6225-ad_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_660_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_680_4g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_865\+_5g_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_865_5g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_870_5g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_888_5g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_888_5g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_8_gen_1_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_auto_5g_modem-rf_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_x55_5g_modem-rf_system_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_xr2_5g_platform_firmware همه CISA ADP / Vulnrichment
qualcomm sw5100_firmware همه CISA ADP / Vulnrichment
qualcomm sw5100p_firmware همه CISA ADP / Vulnrichment
qualcomm sxr2130_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9335_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9341_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9370_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9375_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9380_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9385_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3950_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3980_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3988_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3990_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8810_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8815_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8830_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8835_firmware همه CISA ADP / Vulnrichment

منابع و راهنماها

۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۰۷/۱۶
آخرین به‌روزرسانی
۱۴۰۴/۰۷/۳۰
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

فهرست KEV آژانس CISA

تاریخ افزوده‌شدن
۱۴۰۳/۰۷/۱۷
مهلت رفع
۱۴۰۳/۰۸/۰۸
استفاده در باج‌افزار
نامشخص

پیش‌بینی بهره‌برداری (EPSS)

۰٫۶۷٪
احتمال بهره‌برداری در ۳۰ روز
۵۲٫۱٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
فعال
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-416
    Use After Free