CVE-2024-43061

Use After Free in Audio

Published Mar 3, 2025 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-5791 Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
Title Use After Free in Audio
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
qualcomm
Published
Updated
Mar 3, 2025, 12:28 PM
Reserved
Aug 5, 2024, 2:22 PM
Status
Analyzed
Published
Mar 3, 2025, 11:15 AM
Modified
Jun 17, 2026, 7:50 AM