Ar8035 Firmware CVE-2024-43057
HIGHCVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
Memory corruption while processing command in Glink linux.
AnalysisAI
Memory corruption while processing command in Glink linux. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.
Technical ContextAI
This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. Affected products include: Qualcomm Qcn6224 Firmware, Qualcomm Qcn6274 Firmware, Qualcomm Qcn6402 Firmware, Qualcomm Qcn6412 Firmware, Qualcomm Qcn6422 Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.
Share
External POC / Exploit Code
Leaving vuln.today