CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2024-10-08. EPSS: 0.7% chance of exploitation in the next 30 days.

Memory corruption while maintaining memory maps of HLOS memory.

Affected products

• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6595 Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6688AQ Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCS410 Firmware: affected versions not specified
• Qualcomm QCS610 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm SA4150P Firmware: affected versions not specified
• Qualcomm SA4155P Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• and 39 more

Published 2024-10-07. Last modified 2026-06-17.