How to fix CVE-2024-43057?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Is Use After Free affected by CVE-2024-43057?

CVE-2024-43057 presents notable security risk, a use-after-free vulnerability rated CVSS 7.8. Exploitation could compromise the security of affected deployments. A patch is available and should be applied as part of regular vulnerability management.

CVE-2024-43057

HIGH

2025-03-03 [email protected]

7.8

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:29 vuln.today

Patch Released

Mar 28, 2026 - 18:29 nvd

Patch available

CVE Published

Mar 03, 2025 - 11:15 nvd

HIGH 7.8

Tags

Use After Free Memory Corruption Buffer Overflow Qcn6224 Firmware Qcn6274 Firmware Qcn6402 Firmware Qcn6412 Firmware Qcn6422 Firmware Qcn6432 Firmware Qcn9000 Firmware Qcn9012 Firmware Qcn9022 Firmware Qcn9024 Firmware Qcn9070 Firmware Qcn9072 Firmware Qcn9074 Firmware Qcn9100 Firmware Qcn9160 Firmware Qcn9274 Firmware Qcs410 Firmware Qcs610 Firmware Qfw7114 Firmware Qfw7124 Firmware Qsm8250 Firmware Video Collaboration Vc1 Platform Firmware Video Collaboration Vc3 Platform Firmware Qxm8083 Firmware Sa6145p Firmware Sa6150p Firmware Sa6155p Firmware Sa8145p Firmware Sa8150p Firmware Sa8155p Firmware Sa8195p Firmware Sa8295p Firmware Sd865 5g Firmware Sdm429w Firmware Sdx55 Firmware Sdx65m Firmware Snapdragon 429 Firmware Snapdragon 8 Gen 1 Firmware Snapdragon 865 5G Firmware Ar8035 Firmware C V2x 9150 Firmware Csr8811 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Fsm10056 Firmware Fsm20055 Firmware Fsm20056 Firmware Immersive Home 214 Firmware Immersive Home 216 Firmware Immersive Home 316 Firmware Immersive Home 318 Firmware Immersive Home 3210 Firmware Immersive Home 326 Firmware Ipq5010 Firmware Ipq5028 Firmware Ipq5300 Firmware Ipq5302 Firmware Ipq5312 Firmware Ipq5332 Firmware Ipq6000 Firmware Ipq6010 Firmware Ipq6018 Firmware Ipq6028 Firmware Ipq8070a Firmware Ipq8071a Firmware Ipq8072a Firmware Ipq8074a Firmware Ipq8076 Firmware Ipq8076a Firmware Ipq8078 Firmware Ipq8078a Firmware Ipq8173 Firmware Ipq8174 Firmware Ipq9008 Firmware Ipq9048 Firmware Ipq9554 Firmware Ipq9570 Firmware Ipq9574 Firmware Pmp8074 Firmware Qam8295p Firmware Qca0000 Firmware Qca4024 Firmware Qca6174a Firmware Qca6391 Firmware Qca6426 Firmware Qca6436 Firmware Qca6574au Firmware Qca6584au Firmware Qca6696 Firmware Qca6698aq Firmware Qca8072 Firmware Qca8075 Firmware Qca8081 Firmware Qca8082 Firmware Qca8084 Firmware Qca8085 Firmware Qca8337 Firmware Qca8386 Firmware Qca9367 Firmware Qca9377 Firmware Qca9888 Firmware Qca9889 Firmware Qcc710 Firmware Qcf8000 Firmware Qcf8000sfp Firmware Qcf8001 Firmware Qcn5021 Firmware Qcn5022 Firmware Qcn5024 Firmware Qcn5052 Firmware Qcn5054 Firmware Qcn5122 Firmware Qcn5124 Firmware Qcn5152 Firmware Qcn5154 Firmware Qcn5164 Firmware Qcn6023 Firmware Qcn6024 Firmware Qcn6100 Firmware Qcn6102 Firmware Qcn6112 Firmware Qcn6122 Firmware Qcn6132 Firmware Snapdragon 870 5G Firmware Snapdragon 888 5G Firmware Snapdragon Auto 5g Modem Rf Gen 2 Firmware Snapdragon W5 Gen 1 Wearable Firmware Snapdragon X55 5G Firmware Snapdragon X65 5G Firmware Snapdragon X72 5G Firmware Snapdragon X75 5G Firmware Snapdragon Xr2 5g Firmware Sw5100 Firmware Sw5100p Firmware Sxr2130 Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9370 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcn3620 Firmware Wcn3660b Firmware Wcn3680b Firmware Wcn3950 Firmware Wcn3980 Firmware Wcn3988 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8835 Firmware

Description

Memory corruption while processing command in Glink linux.

Analysis

Memory corruption while processing command in Glink linux. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Technical Context

This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. Affected products include: Qualcomm Qcn6224 Firmware, Qualcomm Qcn6274 Firmware, Qualcomm Qcn6402 Firmware, Qualcomm Qcn6412 Firmware, Qualcomm Qcn6422 Firmware.

Affected Products

Qualcomm Qcn6224 Firmware, Qualcomm Qcn6274 Firmware, Qualcomm Qcn6402 Firmware, Qualcomm Qcn6412 Firmware, Qualcomm Qcn6422 Firmware.

Remediation

A vendor patch is available. Apply the latest security update as soon as possible. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +39

POC: 0

CVE-2024-43057 vulnerability details – vuln.today

Back

CVE-2024-43057

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code