High 7.8Known exploited (CISA KEV)Published Oct 7, 2024

CVE-2024-43047Use After Free in DSP Service

Updated under an hour ago (Oct 27, 2026, 12:23 AM ET)

Does this affect you?

It affects Qualcomm, Inc. Snapdragon and 59 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Oct 8, 2024; federal agencies had to remediate by Oct 29, 2024. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Qualcomm, Inc. Snapdragon

Exploited in the last 30 days

Memory corruption while maintaining memory maps of HLOS memory.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-416
Known exploited: Added to CISA KEV Oct 8, 2024; federal remediation due Oct 29, 2024Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
EPSS (exploitation in the next 30 days): 0.67% (percentile 52)
Assigned by: qualcomm
NVD analysis: Analyzed
Record last updated: Oct 21, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name)	FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6174A; QCA6391; QCA6426; and 56 more ranges	CNA record
qualcomm fastconnect_6700_firmware qualcomm:fastconnect_6700_firmware	all versions	CISA ADP
qualcomm fastconnect_6800_firmware qualcomm:fastconnect_6800_firmware	all versions	CISA ADP
qualcomm fastconnect_6900_firmware qualcomm:fastconnect_6900_firmware	all versions	CISA ADP
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware	all versions	CISA ADP
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware	all versions	CISA ADP
qualcomm qca6174a_firmware qualcomm:qca6174a_firmware	all versions	CISA ADP
qualcomm qca6391_firmware qualcomm:qca6391_firmware	all versions	CISA ADP
qualcomm qca6426_firmware qualcomm:qca6426_firmware	all versions	CISA ADP
qualcomm qca6436_firmware qualcomm:qca6436_firmware	all versions	CISA ADP
1–10 of 60

References

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html	patch, vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047	us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.