Skip to content
Fencer Vulns
high 7.8

CVE-2024-43048 json

Stack-based Buffer Overflow in Performance

published 2024-12-02 23 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-40298

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 0%
public exploits
0
none known

Summary

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
23 mo ago

Exploit prediction

0.10% chance of exploitation in the next 30 days, higher than 0% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm fastconnect_6200_firmware
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm qcm4325_firmware
  • qualcomm qcm8550_firmware
  • qualcomm sdm429w_firmware
  • qualcomm sg4150p_firmware
  • qualcomm sm4635_firmware
  • qualcomm sm8550p_firmware
  • qualcomm sm8635_firmware
  • qualcomm sm8750_firmware
  • qualcomm sm8750p_firmware
  • qualcomm snapdragon_4_gen_1_mobile_platform_firmware
  • qualcomm snapdragon_429_mobile_platform_firmware
  • qualcomm snapdragon_460_mobile_platform_firmware
  • qualcomm snapdragon_480_5g_mobile_platform_firmware
  • qualcomm snapdragon_662_mobile_platform_firmware
  • qualcomm snapdragon_680_4g_mobile_platform_firmware
  • qualcomm snapdragon_695_5g_mobile_platform_firmware
  • qualcomm snapdragon_8_gen_2_mobile_platform_firmware
  • qualcomm snapdragon_8_gen_3_mobile_platform_firmware
  • qualcomm vision_intelligence_400_platform_firmware
  • qualcomm wcd9335_firmware
  • qualcomm wcd9341_firmware
  • qualcomm wcd9370_firmware
  • qualcomm wcd9375_firmware
  • qualcomm wcd9378_firmware
  • qualcomm wcd9380_firmware
  • qualcomm wcd9385_firmware
  • qualcomm wcd9390_firmware
  • qualcomm wcd9395_firmware
  • qualcomm wcn3620_firmware
  • qualcomm wcn3660b_firmware
  • qualcomm wcn3950_firmware
  • qualcomm wcn3988_firmware
  • qualcomm wcn3990_firmware
  • qualcomm wcn6755_firmware
  • qualcomm wcn7860_firmware
  • qualcomm wcn7861_firmware
  • qualcomm wcn7880_firmware
  • qualcomm wcn7881_firmware
  • qualcomm wsa8810_firmware
  • qualcomm wsa8815_firmware
  • qualcomm wsa8830_firmware
  • qualcomm wsa8832_firmware
  • qualcomm wsa8835_firmware
  • qualcomm wsa8840_firmware
  • qualcomm wsa8845_firmware
  • qualcomm wsa8845h_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.