CVE-2024-43055

CVE-2024-43055 is a memory corruption vulnerability (CWE-120) triggered during the processing of camera use case IOCTL calls in Qualcomm components. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high potential impact with local access required.

A local attacker possessing low privileges can exploit this issue with low attack complexity and without requiring user interaction. Exploitation enables high confidentiality, integrity, and availability impacts, such as unauthorized data access, modification, or denial of service through memory corruption.

Qualcomm's March 2025 Security Bulletin provides details on affected products, patches, and mitigation guidance; see https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html for implementation steps.