CVE-2024-43049
HIGHCVSS 7.8/10EPSS 0.10%
Last modified
CVE-2024-43049 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Fastconnect 6700 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Qcc2073 Firmware | All versions |
| Qualcomm | Qcc2076 Firmware | All versions |
| Qualcomm | Sc8380xp Firmware | All versions |
| Qualcomm | Sdm429w Firmware | All versions |
| Qualcomm | Snapdragon 429 Mobile Platform Firmware | All versions |
| Qualcomm | Snapdragon 7c\+ Gen 3 Compute Firmware | All versions |
| Qualcomm | Snapdragon 8cx Gen 3 Compute Platform Firmware | All versions |
| Qualcomm | Wcd9380 Firmware | All versions |
| Qualcomm | Wcd9385 Firmware | All versions |
| Qualcomm | Wcn3620 Firmware | All versions |
| Qualcomm | Wcn3660b Firmware | All versions |
| Qualcomm | Wsa8830 Firmware | All versions |
| Qualcomm | Wsa8835 Firmware | All versions |
| Qualcomm | Wsa8840 Firmware | All versions |
| Qualcomm | Wsa8845 Firmware | All versions |
| Qualcomm | Wsa8845h Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-43049?
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
How severe is CVE-2024-43049?
CVE-2024-43049 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.10% probability of exploitation in the next 30 days.
How do I fix CVE-2024-43049?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43042Pluck CMS 4.7.18 does not restrict failed login attempts, al…9.8
- CVE-2024-43044Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows ag…8.8
- CVE-2024-43045Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not …6.3
- CVE-2024-43046There may be information disclosure during memory re-allocat…5.5
- CVE-2024-43047Memory corruption while maintaining memory maps of HLOS memo…7.8
- CVE-2024-43048Memory corruption when invalid input is passed to invoke GPU…7.8
- CVE-2024-4305The Post Grid Gutenberg Blocks and WordPress Blog Plugin Wo…6.8
- CVE-2024-43050Memory corruption while invoking IOCTL calls from user space…7.8
- CVE-2024-43051Information disclosure while deriving keys for a session for…5.5
- CVE-2024-43052Memory corruption while processing API calls to NPU with inv…7.8
- CVE-2024-43053Memory corruption while invoking IOCTL calls from user space…7.8
- CVE-2024-43055Memory corruption while processing camera use case IOCTL cal…7.8
Are you affected by CVE-2024-43049?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST