Memory Corruption Vulnerability in Qualcomm Audio Mixer Controls
CVE-2024-49830

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 May 2025

What is CVE-2024-49830?

A vulnerability has been identified that allows for memory corruption during the processing of IOCTL calls specifically designed to set mixer controls in Qualcomm audio products. This flaw could potentially enable attackers to execute arbitrary code, leading to unintended system behavior. Users are advised to apply the latest security updates to mitigate against potential exploitation.

Affected Version(s)

Snapdragon Snapdragon Auto QCA6574AU

Snapdragon Snapdragon Auto QCA6595AU

Snapdragon Snapdragon Auto QCA6678AQ

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.