Critical Vulnerabilities in Qualcomm Products Expose Devices to Remote and Local Exploits

docs.qualcomm.com

Critical Vulnerabilities in Qualcomm Products Expose Devices to Remote and Local Exploits - 19d

Qualcomm has issued a security bulletin addressing multiple vulnerabilities affecting its products, including a critical vulnerability, CVE-2024-43047, that has been actively exploited in targeted attacks. The vulnerability resides within the FASTRPC driver, a critical component responsible for device communication processes. Exploitation of this vulnerability could lead to remote code execution, granting attackers control over affected devices and access to sensitive data. This underscores the importance of prompt patching and highlights the vulnerability of device communication processes to malicious actors. Original equipment manufacturers (OEMs) have received patches to address this vulnerability, and they are strongly encouraged to implement these updates without delay. Users should also contact their device manufacturers for specific patch details and guidance to ensure their devices are protected.

References:

cyble.com - Cyble's blog post urging OEMs to address vulnerabilities in device communication, highlighting the impact of CVE-2024-43047. - 19d
socradar.io - SocRadar's report discussing Qualcomm's security bulletin and the exploited zero-day vulnerability CVE-2024-43047. - 19d
cyble.com - Cyble's analysis of the Qualcomm vulnerabilities and the need for immediate action. - 19d
securityaffairs.com - SecurityAffairs' report on CISA adding the Qualcomm vulnerabilities to its Known Exploited Vulnerabilities Catalog. - 19d
sra.io - SRA.io's coverage of the critical Qualcomm vulnerabilities and their potential for exploitation. - 19d
www.cisa.gov - CISA's announcement of adding three known exploited vulnerabilities to its catalog, including the Qualcomm CVE-2024-43047, highlighting the urgency of patching. - 19d
cyberinsider.com - Critical Firefox Zero-Day Vulnerability Exploited in the Wild - 19d
Security Archives - Mozilla issued an urgent Firefox update to fix an actively exploited flaw - 19d
Security Risk Advisors - Critical Firefox Vulnerability (CVE-2024-9680) Actively Exploited in the Wild - 19d
News - This article discusses the critical vulnerability in Firefox and its exploitation. - 16d
www.mozilla.org - This advisory details the vulnerability and provides information about the fix. - 16d

Classification:

HashTags: Qualcomm Vulnerability DeviceCommunication
Company: Qualcomm
Target: Qualcomm Users
Product: Multiple Products
Feature: FASTRPC Driver
Type: Vulnerability
Severity: Critical

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.