CVE Feed

    Dashboard / CVE / CVE-2024-43052

    CVE-2024-43052

    Memory corruption while processing API calls to NPU with invalid input.

    Published:Dec 2, 2024
    Last Modified:Dec 12, 2024
    EPS:Dec 2, 2024
    EPSS Score:0.00043
    CVSS Score:7.8

    Affected Products

    Vendor
    Qualcomm
    Product
    205 Mobile Platform
    Vendor
    Qualcomm
    Product
    205 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    215 Mobile Platform
    Vendor
    Qualcomm
    Product
    215 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Apq8017
    Vendor
    Qualcomm
    Product
    Apq8017 Firmware
    Vendor
    Qualcomm
    Product
    Apq8037
    Vendor
    Qualcomm
    Product
    Apq8037 Firmware
    Vendor
    Qualcomm
    Product
    Fastconnect 6800
    Vendor
    Qualcomm
    Product
    Fastconnect 6800 Firmware
    Vendor
    Qualcomm
    Product
    Fastconnect 6900
    Vendor
    Qualcomm
    Product
    Fastconnect 6900 Firmware
    Vendor
    Qualcomm
    Product
    Fastconnect 7800
    Vendor
    Qualcomm
    Product
    Fastconnect 7800 Firmware
    Vendor
    Qualcomm
    Product
    Home Hub 100 Platform
    Vendor
    Qualcomm
    Product
    Home Hub 100 Platform Firmware
    Vendor
    Qualcomm
    Product
    Msm8108
    Vendor
    Qualcomm
    Product
    Msm8108 Firmware
    Vendor
    Qualcomm
    Product
    Msm8209
    Vendor
    Qualcomm
    Product
    Msm8209 Firmware
    Vendor
    Qualcomm
    Product
    Msm8608
    Vendor
    Qualcomm
    Product
    Msm8608 Firmware
    Vendor
    Qualcomm
    Product
    Msm8909w
    Vendor
    Qualcomm
    Product
    Msm8909w Firmware
    Vendor
    Qualcomm
    Product
    Pm8937
    Vendor
    Qualcomm
    Product
    Pm8937 Firmware
    Vendor
    Qualcomm
    Product
    Qca6174a
    Vendor
    Qualcomm
    Product
    Qca6174a Firmware
    Vendor
    Qualcomm
    Product
    Qca6391
    Vendor
    Qualcomm
    Product
    Qca6391 Firmware
    Vendor
    Qualcomm
    Product
    Qca6421
    Vendor
    Qualcomm
    Product
    Qca6421 Firmware
    Vendor
    Qualcomm
    Product
    Qca6426
    Vendor
    Qualcomm
    Product
    Qca6426 Firmware
    Vendor
    Qualcomm
    Product
    Qca6431
    Vendor
    Qualcomm
    Product
    Qca6431 Firmware
    Vendor
    Qualcomm
    Product
    Qca6436
    Vendor
    Qualcomm
    Product
    Qca6436 Firmware
    Vendor
    Qualcomm
    Product
    Qca9379
    Vendor
    Qualcomm
    Product
    Qca9379 Firmware
    Vendor
    Qualcomm
    Product
    Qcm2150
    Vendor
    Qualcomm
    Product
    Qcm2150 Firmware
    Vendor
    Qualcomm
    Product
    Qcm8550
    Vendor
    Qualcomm
    Product
    Qcm8550 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9274
    Vendor
    Qualcomm
    Product
    Qcn9274 Firmware
    Vendor
    Qualcomm
    Product
    Qcs7230
    Vendor
    Qualcomm
    Product
    Qcs7230 Firmware
    Vendor
    Qualcomm
    Product
    Qcs8250
    Vendor
    Qualcomm
    Product
    Qcs8250 Firmware
    Vendor
    Qualcomm
    Product
    Qcs8550
    Vendor
    Qualcomm
    Product
    Qcs8550 Firmware
    Vendor
    Qualcomm
    Product
    Qet4101
    Vendor
    Qualcomm
    Product
    Qet4101 Firmware
    Vendor
    Qualcomm
    Product
    Qsm8250
    Vendor
    Qualcomm
    Product
    Qsm8250 Firmware
    Vendor
    Qualcomm
    Product
    Qsw8573
    Vendor
    Qualcomm
    Product
    Qsw8573 Firmware
    Vendor
    Qualcomm
    Product
    Qualcomm 205 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Qualcomm 215 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Qualcomm Video Collaboration Vc5 Platform Firmware
    Vendor
    Qualcomm
    Product
    Sc8380xp
    Vendor
    Qualcomm
    Product
    Sc8380xp Firmware
    Vendor
    Qualcomm
    Product
    Sd865 5g
    Vendor
    Qualcomm
    Product
    Sd865 5g Firmware
    Vendor
    Qualcomm
    Product
    Sdm429w
    Vendor
    Qualcomm
    Product
    Sdm429w Firmware
    Vendor
    Qualcomm
    Product
    Sdx55
    Vendor
    Qualcomm
    Product
    Sdx55 Firmware
    Vendor
    Qualcomm
    Product
    Sg8275p
    Vendor
    Qualcomm
    Product
    Sg8275p Firmware
    Vendor
    Qualcomm
    Product
    Sm8550p
    Vendor
    Qualcomm
    Product
    Sm8550p Firmware
    Vendor
    Qualcomm
    Product
    Sm8635
    Vendor
    Qualcomm
    Product
    Sm8635 Firmware
    Vendor
    Qualcomm
    Product
    Sm8750
    Vendor
    Qualcomm
    Product
    Sm8750 Firmware
    Vendor
    Qualcomm
    Product
    Sm8750p
    Vendor
    Qualcomm
    Product
    Sm8750p Firmware
    Vendor
    Qualcomm
    Product
    Smart Audio 200 Platform
    Vendor
    Qualcomm
    Product
    Smart Audio 200 Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 208 Processor
    Vendor
    Qualcomm
    Product
    Snapdragon 208 Processor Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 210 Processor
    Vendor
    Qualcomm
    Product
    Snapdragon 210 Processor Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 212 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 212 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 425 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 425 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 427 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 427 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 429 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 429 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 430 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 430 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 435 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 435 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 439 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 439 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 865\+ 5g Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 865\+ 5g Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 865 5g Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 865 5g Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 870 5g Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 870 5g Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 8\+ Gen 2 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 8\+ Gen 2 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 8 Gen 2 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 8 Gen 2 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon 8 Gen 3 Mobile Platform
    Vendor
    Qualcomm
    Product
    Snapdragon 8 Gen 3 Mobile Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 2100 Platform
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 2100 Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 2500 Platform
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 2500 Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 3100 Platform
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 3100 Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 4100\+ Platform
    Vendor
    Qualcomm
    Product
    Snapdragon Wear 4100\+ Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon X55 5g Modem-rf System
    Vendor
    Qualcomm
    Product
    Snapdragon X55 5g Modem-rf System Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Xr2\+ Gen 1 Platform
    Vendor
    Qualcomm
    Product
    Snapdragon Xr2\+ Gen 1 Platform Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon Xr2 5g Platform
    Vendor
    Qualcomm
    Product
    Snapdragon Xr2 5g Platform Firmware
    Vendor
    Qualcomm
    Product
    Sxr2130
    Vendor
    Qualcomm
    Product
    Sxr2130 Firmware
    Vendor
    Qualcomm
    Product
    Video Collaboration Vc5 Platform
    Vendor
    Qualcomm
    Product
    Video Collaboration Vc5 Platform Firmware
    Vendor
    Qualcomm
    Product
    Wcd9326
    Vendor
    Qualcomm
    Product
    Wcd9326 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9335
    Vendor
    Qualcomm
    Product
    Wcd9335 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9370
    Vendor
    Qualcomm
    Product
    Wcd9370 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9375
    Vendor
    Qualcomm
    Product
    Wcd9375 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9385
    Vendor
    Qualcomm
    Product
    Wcd9385 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9390
    Vendor
    Qualcomm
    Product
    Wcd9390 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9395
    Vendor
    Qualcomm
    Product
    Wcd9395 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3610
    Vendor
    Qualcomm
    Product
    Wcn3610 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3615
    Vendor
    Qualcomm
    Product
    Wcn3615 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3620
    Vendor
    Qualcomm
    Product
    Wcn3620 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3660b
    Vendor
    Qualcomm
    Product
    Wcn3660b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680
    Vendor
    Qualcomm
    Product
    Wcn3680 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680b
    Vendor
    Qualcomm
    Product
    Wcn3680b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3980
    Vendor
    Qualcomm
    Product
    Wcn3980 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6755
    Vendor
    Qualcomm
    Product
    Wcn6755 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7860
    Vendor
    Qualcomm
    Product
    Wcn7860 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7861
    Vendor
    Qualcomm
    Product
    Wcn7861 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7880
    Vendor
    Qualcomm
    Product
    Wcn7880 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7881
    Vendor
    Qualcomm
    Product
    Wcn7881 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8810
    Vendor
    Qualcomm
    Product
    Wsa8810 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8815
    Vendor
    Qualcomm
    Product
    Wsa8815 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8830
    Vendor
    Qualcomm
    Product
    Wsa8830 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8832
    Vendor
    Qualcomm
    Product
    Wsa8832 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8835
    Vendor
    Qualcomm
    Product
    Wsa8835 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8840
    Vendor
    Qualcomm
    Product
    Wsa8840 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8845
    Vendor
    Qualcomm
    Product
    Wsa8845 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8845h
    Vendor
    Qualcomm
    Product
    Wsa8845h Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-20 Improper Input Validation

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-101 Server Side Include (SSI) Injection
    CAPEC-104 Cross Zone Scripting
    CAPEC-108 Command Line Execution through SQL Injection
    CAPEC-109 Object Relational Mapping Injection
    CAPEC-110 SQL Injection through SOAP Parameter Tampering
    CAPEC-120 Double Encoding
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-135 Format String Injection
    CAPEC-136 LDAP Injection
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-153 Input Data Manipulation
    CAPEC-182 Flash Injection
    CAPEC-209 XSS Using MIME Type Mismatch
    CAPEC-22 Exploiting Trust in Client
    CAPEC-23 File Content Injection
    CAPEC-230 Serialized Data with Nested Payloads
    CAPEC-231 Oversized Serialized Data Payloads
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-250 XML Injection
    CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-28 Fuzzing
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
    CAPEC-42 MIME Conversion
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-473 Signature Spoof
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-588 DOM-Based XSS
    CAPEC-63 Cross-Site Scripting (XSS)
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-664 Server Side Request Forgery
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-72 URL Encoding
    CAPEC-73 User-Controlled Filename
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-81 Web Server Logs Tampering
    CAPEC-83 XPath Injection
    CAPEC-85 AJAX Footprinting
    CAPEC-88 OS Command Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities

    Related CVEs

    CVE-2025-21487 (CVSS 8.2) — Information disclosure while decoding RTP packet received by UE from the network, when payload length mentione…
    CVE-2024-53026 (CVSS 8.2) — Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.…
    CVE-2024-53021 (CVSS 8.2) — Information disclosure may occur while processing goodbye RTCP packet from network.…
    CVE-2024-53020 (CVSS 8.2) — Information disclosure may occur while decoding the RTP packet with invalid header extension from network.…
    CVE-2024-33056 (CVSS 8.4) — Memory corruption when allocating and accessing an entry in an SMEM partition continuously.…
    CVE-2024-38423 (CVSS 7.8) — Memory corruption while processing GPU page table switch.…
    CVE-2024-38422 (CVSS 7.8) — Memory corruption while processing voice packet with arbitrary data received from ADSP.…
    CVE-2024-23385 (CVSS 7.5) — Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.…
    CVE-2024-33043 (CVSS 5.5) — Transient DOS while handling PS event when Program Service name length offset value is set to 255.…
    CVE-2024-23359 (CVSS 8.2) — Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from netwo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High