HIGH · 7.8

CVE-2024-43059

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Vulnerability Description

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommSa8770P Firmware-
QualcommSa8770PAll versions
QualcommSa8775P Firmware-
QualcommSa8775PAll versions
QualcommSa9000P Firmware-
QualcommSa9000PAll versions
QualcommSdm429W Firmware-
QualcommSdm429WAll versions
QualcommSnapdragon 429 Firmware-
QualcommSnapdragon 429All versions
QualcommSnapdragon 8 Gen 1 Firmware-
QualcommSnapdragon 8 Gen 1All versions
QualcommSxr2230P Firmware-
QualcommSxr2230PAll versions
QualcommSxr2250P Firmware-
QualcommSxr2250PAll versions
QualcommWcd9380 Firmware-
QualcommWcd9380All versions
QualcommWcd9385 Firmware-
QualcommWcd9385All versions

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-43059?

CVE-2024-43059 is a vulnerability with a CVSS score of 7.8 (HIGH). Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

How severe is CVE-2024-43059?

CVE-2024-43059 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-43059?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sa8770P Firmware, Qualcomm Sa8770P, Qualcomm Sa8775P Firmware, Qualcomm Sa8775P, Qualcomm Sa9000P Firmware.