# CVE-2024-43047

Memory corruption while maintaining memory maps of HLOS memory.

- Page: https://www.vulneraibility.com/cve/CVE-2024-43047
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2024-10-08; CISA due date 2024-10-29
- EPSS: 0.67%
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2024-10-09)
- Weakness: CWE-416
- Published: 2024-10-07

## Affected versions

- Qualcomm, Inc. Snapdragon: affected FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6174A; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6688AQ; QCA6696; QCA6698AQ; QCS410; QCS610; QCS6490; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; SA4150P; SA4155P; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; SA8295P; SD660; SD865 5G; SG4150P; Snapdragon 660 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform (SM6225-AD); Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform (SM8250-AB); Snapdragon 870 5G Mobile Platform (SM8250-AC); Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform (SM8350-AC); Snapdragon Auto 5G Modem-RF; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon X55 5G Modem-RF System; Snapdragon XR2 5G Platform; SW5100; SW5100P; SXR2130; WCD9335; WCD9341; WCD9370; WCD9375; WCD9380; WCD9385; WCN3950; WCN3980; WCN3988; WCN3990; WSA8810; WSA8815; WSA8830; WSA8835

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.