CVE-2024-43060: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

Affected products

  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm Fastconnect 6900 Firmware: affected versions not specified
  • Qualcomm Fastconnect 7800 Firmware: affected versions not specified
  • Qualcomm QAM8295P Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6696 Firmware: affected versions not specified
  • Qualcomm QCA8081 Firmware: affected versions not specified
  • Qualcomm QCA8337 Firmware: affected versions not specified
  • Qualcomm QCA9367 Firmware: affected versions not specified
  • Qualcomm QCA9377 Firmware: affected versions not specified
  • Qualcomm QCC710 Firmware: affected versions not specified
  • Qualcomm QCN6224 Firmware: affected versions not specified
  • Qualcomm QCN6274 Firmware: affected versions not specified
  • Qualcomm QCS8550 Firmware: affected versions not specified
  • Qualcomm QFW7114 Firmware: affected versions not specified
  • Qualcomm QFW7124 Firmware: affected versions not specified
  • Qualcomm SA6145P Firmware: affected versions not specified
  • Qualcomm SA6150P Firmware: affected versions not specified
  • Qualcomm SA6155P Firmware: affected versions not specified
  • Qualcomm SA8145P Firmware: affected versions not specified
  • Qualcomm SA8150P Firmware: affected versions not specified
  • Qualcomm SA8155P Firmware: affected versions not specified
  • Qualcomm SA8195P Firmware: affected versions not specified
  • Qualcomm SA8295P Firmware: affected versions not specified
  • Qualcomm SA8530P Firmware: affected versions not specified
  • and 16 more

Published 2025-03-03. Last modified 2026-06-17.