CVE-2024-49830

Published: May 6, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Memory corruption while processing an IOCTL call to set mixer controls.

Affected (12)

Products: Qualcomm: Qca6574au Firmware, Qca6595au Firmware, Qca6678aq Firmware, Qca6688aq Firmware, Qca6698aq Firmware, Qca9367 Firmware, Qca9377 Firmware, Sdm429w Firmware, Snapdragon 429 Mobile Firmware, Snapdragon Auto 5g Modem Rf Gen 2 Firmware, Wcn3620 Firmware, Wcn3660b Firmware

12 products

Qca6574au Firmware

Qca6595au Firmware

Qca6678aq Firmware

Qca6688aq Firmware

Qca6698aq Firmware

Qca9367 Firmware

Qca9377 Firmware

Sdm429w Firmware

Snapdragon 429 Mobile Firmware

Snapdragon Auto 5g Modem Rf Gen 2 Firmware

Wcn3620 Firmware

Wcn3660b Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6574au Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6574au	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6595au Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6595au	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6678aq Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6678aq	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6688aq Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6688aq	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6698aq Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6698aq	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca9367 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca9367	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca9377 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca9377	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdm429w Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdm429w	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 429 Mobile Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 429 Mobile	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Auto 5g Modem Rf Gen 2 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Auto 5g Modem Rf Gen 2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3620 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3620	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3660b Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3660b	All versions

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

Source: product-security@qualcomm.com

PatchVendor Advisory

Timeline

No history available yet.