Memory Corruption Vulnerability in Qualcomm Products
CVE-2024-43067

7.8HIGH

Key Information:

Vendor
Qualcomm
Status
Snapdragon
Vendor
CVE Published:
7 April 2025

Summary

A memory corruption vulnerability exists in Qualcomm chipsets due to improper handling of read data from the EEPROM, where the IO configuration is improperly exposed as shared memory. This flaw could potentially allow adversaries to manipulate memory operations, leading to unauthorized access or disruption of services.

Affected Version(s)

Snapdragon Snapdragon Auto C-V2X 9150

Snapdragon Snapdragon Auto FastConnect 6800

Snapdragon Snapdragon Auto FastConnect 6900

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.