Memory Corruption Vulnerability in Qualcomm's Listener Registration
CVE-2024-43066

7.8HIGH

Key Information:

Vendor
Qualcomm
Status
Snapdragon
Vendor
CVE Published:
7 April 2025

Summary

A memory corruption vulnerability has been identified in Qualcomm's handling of file descriptors during the registration and de-registration process of listeners. This flaw could potentially lead to unintended behavior in products reliant on Qualcomm technologies, emphasizing the need for robust security measures and timely updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Snapdragon Snapdragon Auto CSRB31024

Snapdragon Snapdragon Auto FastConnect 6200

Snapdragon Snapdragon Auto FastConnect 6700

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.