CVE-2024-43061 — Use After Free in Audio

Description (CNA)

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6900; affected FastConnect 7800; affected QAM8295P; affected QCA6574AU; affected QCA6696; affected QCA9367; affected QCA9377; affected QCS8550; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA9000P; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8832; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6900; affected FastConnect 7800; affected QAM8295P; affected QCA6574AU; affected QCA6696; affected QCA9367; affected QCA9377; affected QCS8550; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA9000P; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected SXR2230P; affected SXR2250P; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8832; affected WSA8835

CWE

CWE-416

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.