جزئیات آسیب‌پذیری
CVE-2024-43047
بهره‌برداری فعال
Qualcomm Snapdragonqualcomm fastconnect_6700_firmwarequalcomm fastconnect_6800_firmwarequalcomm fastconnect_6900_firmwarequalcomm fastconnect_7800_firmwarequalcomm qam8295p_firmware
Use After Free in DSP Service
CVSS 3.1
7.8بالا
نمای کلی
اکسپلویت‌های عمومی
اخبار مرتبط
خط زمانی
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
Memory corruption while maintaining memory maps of HLOS memory.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (qualcomm) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | FastConnect 6700 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 6800 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QAM8295P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6174A | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6391 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6426 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6436 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6574AU | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6584AU | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6595 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6595AU | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6688AQ | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6696 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6698AQ | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCS410 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCS610 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCS6490 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Qualcomm Video Collaboration VC1 Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Qualcomm Video Collaboration VC3 Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA4150P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA4155P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA6145P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA6150P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA6155P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA8145P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA8150P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA8155P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA8195P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SA8295P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SD660 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SD865 5G | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SG4150P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SW5100 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SW5100P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SXR2130 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 660 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 680 4G Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 685 4G Mobile Platform (SM6225-AD) | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 1 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 865 5G Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 865+ 5G Mobile Platform (SM8250-AB) | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 870 5G Mobile Platform (SM8250-AC) | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 888 5G Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 888+ 5G Mobile Platform (SM8350-AC) | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 5G Modem-RF | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 5G Modem-RF Gen 2 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon X55 5G Modem-RF System | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon XR2 5G Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9335 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9341 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9370 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9375 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9380 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9385 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3950 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3980 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3988 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3990 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8810 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8815 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8830 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8835 | CVEProject cvelistV5 (CNA) |
| qualcomm | fastconnect_6700_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | fastconnect_6800_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | fastconnect_6900_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | fastconnect_7800_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qam8295p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6174a_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6391_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6426_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6436_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6574au_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6584au_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6595_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6595au_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6688aq_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6696_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qca6698aq_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qcs410_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qcs610_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qcs6490_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qualcomm_video_collaboration_vc1_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qualcomm_video_collaboration_vc3_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa4150p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa4155p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa6145p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa6150p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa6155p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa8145p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa8150p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa8155p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa8195p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sa8295p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sd660_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sd865_5g_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sg4150p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sm6225-ad_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_660_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_865\+_5g_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_870_5g_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_888_5g_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_888_5g_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_xr2_5g_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sw5100_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sw5100p_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sxr2130_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9335_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9341_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9370_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9375_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9380_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9385_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcn3950_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcn3980_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcn3988_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcn3990_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8810_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8815_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8830_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8835_firmware | همه | CISA ADP / Vulnrichment |
منابع و راهنماها
۲اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۰۷/۱۶
- آخرین به‌روزرسانی
- ۱۴۰۴/۰۷/۳۰
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- qualcomm
- اولویت کلون
- به‌زودی
فهرست KEV آژانس CISA
- تاریخ افزوده‌شدن
- ۱۴۰۳/۰۷/۱۷
- مهلت رفع
- ۱۴۰۳/۰۸/۰۸
- استفاده در باج‌افزار
- نامشخص
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۷٪
احتمال بهره‌برداری در ۳۰ روز
۵۲٫۱٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- Automatable
- no
- Exploitation
- active
- Technical Impact
- total
ضعف‌ها (CWE)
- CWE-416Use After Free