CVE-2024-43059 — Use After Free in Automotive Multimedia

Description (CNA)

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6900; affected FastConnect 7800; affected QAM8255P; affected QAM8775P; affected SA8255P; affected SA8770P; affected SA8775P; affected SA9000P; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8832; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6900; affected FastConnect 7800; affected QAM8255P; affected QAM8775P; affected SA8255P; affected SA8770P; affected SA8775P; affected SA9000P; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8832; affected WSA8835

CWE

CWE-416

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.