CVE-2024-43052

Local memory corruption via invalid NPU API input

Published Dec 2, 2024 · Updated Dec 3, 2024

Improper input validation in Qualcomm NPU firmware allows local users to corrupt memory through API calls containing invalid input. The NPU API processing path fails to reject malformed call parameters before using them in memory operations. Exploitation requires local low-privileged access and can disclose or modify data or crash the affected device.

CVSS severity7.8
High
EPSS probability0.10%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Improper input validation in Qualcomm NPU firmware allows local users to corrupt memory through API calls containing invalid input. The NPU API processing path fails to reject malformed call parameters before using them in memory operations. Exploitation requires local low-privileged access and can disclose or modify data or crash the affected device.

The record

CVE
CVE-2024-43052
Published
Dec 2, 2024
Updated
Dec 3, 2024
Vendor
Qualcomm
Product
Snapdragon Wear 2500 Platform Firmware
Classifications
CWE-20
Attack vector
local
Privileges
authenticated

Timeline

How it unfolded

  1. Dec 2, 2024CVE publishedPublication date reported by the CVE source.
  2. Dec 3, 2024Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=0 <=*

What conditions does exploitation require?

Attack vectorlocal
Required privilegesauthenticated

What is affected?

Qualcomm · Snapdragon Wear 2500 Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3660B Firmwareversion=0 <=*
Qualcomm · WCD9326 Firmwareversion=0 <=*
Qualcomm · QCS8250 Firmwareversion=0 <=*
Qualcomm · WCD9390 Firmwareversion=0 <=*
Qualcomm · QCM2150 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6431 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 210 Processor Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 427 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm WCD9375 Firmwareversion=0 <=*
Qualcomm · Qualcomm Video Collaboration VC5 Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm MSM8909W Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN7881 Firmwareversion=0 <=*
Qualcomm · Qualcomm SG8275P Firmwareversion=0 <=*
Qualcomm · Qualcomm SM8550P Firmwareversion=0 <=*
Qualcomm · WSA8810 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 429 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6426 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3680 Firmwareversion=0 <=*
Qualcomm · FastConnect 7800 Firmwareversion=0 <=*
Qualcomm · WCN3680B Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 430 Mobile Platform Firmwareversion=0 <=*
Qualcomm · SC8380XP Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm 215 Mobile Platform Firmwareversion=0 <=*
Qualcomm · MSM8108 Firmwareversion=0 <=*
Qualcomm · QCS7230 Firmwareversion=0 <=*
Qualcomm · SM8635 Firmwareversion=0 <=*
Qualcomm · QCN9274 Firmwareversion=0 <=*
Qualcomm · Snapdragonversion=APQ8017; version=APQ8037; version=FastConnect 6800; version=FastConnect 6900; version=FastConnect 7800; version=Home Hub 100 Platform; version=MSM8108; version=MSM8209; version=MSM8608; version=MSM8909W; version=PM8937; version=QCA6174A; version=QCA6391; version=QCA6421; version=QCA6426; version=QCA6431; version=QCA6436; version=QCA9379; version=QCM2150; version=QCM8550; version=QCN9274; version=QCS7230; version=QCS8250; version=QCS8550; version=QET4101; version=QSM8250; version=QSW8573; version=Qualcomm 205 Mobile Platform; version=Qualcomm 215 Mobile Platform; version=Qualcomm Video Collaboration VC5 Platform; version=SC8380XP; version=SD865 5G; version=SDM429W; version=SDX55; version=SG8275P; version=SM8550P; version=SM8635; version=SM8750; version=SM8750P; version=Smart Audio 200 Platform; version=Snapdragon 208 Processor; version=Snapdragon 210 Processor; version=Snapdragon 212 Mobile Platform; version=Snapdragon 425 Mobile Platform; version=Snapdragon 427 Mobile Platform; version=Snapdragon 429 Mobile Platform; version=Snapdragon 430 Mobile Platform; version=Snapdragon 435 Mobile Platform; version=Snapdragon 439 Mobile Platform; version=Snapdragon 865 5G Mobile Platform; version=Snapdragon 865+ 5G Mobile Platform (SM8250-AB); version=Snapdragon 870 5G Mobile Platform (SM8250-AC); version=Snapdragon 8 Gen 2 Mobile Platform; version=Snapdragon 8+ Gen 2 Mobile Platform; version=Snapdragon 8 Gen 3 Mobile Platform; version=Snapdragon Wear 2100 Platform; version=Snapdragon Wear 2500 Platform; version=Snapdragon Wear 3100 Platform; version=Snapdragon Wear 4100+ Platform; version=Snapdragon X55 5G Modem-RF System; version=Snapdragon XR2 5G Platform; version=Snapdragon XR2+ Gen 1 Platform; version=SXR2130; version=WCD9326; version=WCD9335; version=WCD9370; version=WCD9375; version=WCD9380; version=WCD9385; version=WCD9390; version=WCD9395; version=WCN3610; version=WCN3615; version=WCN3620; version=WCN3660B; version=WCN3680; version=WCN3680B; version=WCN3980; version=WCN6755; version=WCN7860; version=WCN7861; version=WCN7880; version=WCN7881; version=WSA8810; version=WSA8815; version=WSA8830; version=WSA8832; version=WSA8835; version=WSA8840; version=WSA8845; version=WSA8845H
Qualcomm · Qualcomm Snapdragon 435 Mobile Platform Firmwareversion=0 <=*
Qualcomm · WCN7880 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 865 5G Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm SM8750 Firmwareversion=0 <=*
Qualcomm · MSM8608 Firmwareversion=0 <=*
Qualcomm · MSM8209 Firmwareversion=0 <=*
Qualcomm · WSA8845H Firmwareversion=0 <=*
Qualcomm · QCA6421 Firmwareversion=0 <=*
Qualcomm · FastConnect 6900 Firmwareversion=0 <=*
Qualcomm · QCM8550 Firmwareversion=0 <=*
Qualcomm · Qualcomm SM8750P Firmwareversion=0 <=*
Qualcomm · QCS8550 Firmwareversion=0 <=*
Qualcomm · WCD9370 Firmwareversion=0 <=*
Qualcomm · Snapdragon Wear 2100 Platform Firmwareversion=0 <=*
Qualcomm · PM8937 Firmwareversion=0 <=*
Qualcomm · WSA8845 Firmwareversion=0 <=*
Qualcomm · Snapdragon X55 5G Modem-RF System Firmwareversion=0 <=*
Qualcomm · WCD9395 Firmwareversion=0 <=*
Qualcomm · Qualcomm QCA6436 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3615 Firmwareversion=0 <=*
Qualcomm · APQ8037 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN7861 Firmwareversion=0 <=*
Qualcomm · WCD9380 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 439 Mobile Platform Firmwareversion=0 <=*
Qualcomm · QSM8250 Firmwareversion=0 <=*
Qualcomm · WCN6755 Firmwareversion=0 <=*
Qualcomm · WSA8840 Firmwareversion=0 <=*
Qualcomm · APQ8017 Firmwareversion=0 <=*
Qualcomm · Qualcomm SD865 5G Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 208 Processor Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3610 Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN3620 Firmwareversion=0 <=*
Qualcomm · Snapdragon Wear 3100 Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm WCN7860 Firmwareversion=0 <=*
Qualcomm · QCA6174A Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 212 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm 205 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm SDX55 Firmwareversion=0 <=*
Qualcomm · QCA9379 Firmwareversion=0 <=*
Qualcomm · WSA8830 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 425 Mobile Platform Firmwareversion=0 <=*
Qualcomm · QCA6391 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon XR2 5G Platform Firmwareversion=0 <=*
Qualcomm · WCD9385 Firmwareversion=0 <=*
Qualcomm · WCN3980 Firmwareversion=0 <=*
Qualcomm · WSA8835 Firmwareversion=0 <=*
Qualcomm · Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmwareversion=0 <=*
Qualcomm · Qualcomm WCD9335 Firmwareversion=0 <=*
Qualcomm · Qualcomm Smart Audio 200 Platform Firmwareversion=0 <=*
Qualcomm · FastConnect 6800 Firmwareversion=0 <=*
Qualcomm · WSA8832 Firmwareversion=0 <=*
Qualcomm · SXR2130 Firmwareversion=0 <=*
Qualcomm · SDM429W Firmwareversion=0 <=*
Qualcomm · Home Hub 100 Platform Firmwareversion=0 <=*
Qualcomm · WSA8815 Firmwareversion=0 <=*

Published CVSS scores

7.8Qualcomm, Inc.CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 9, 2026Sep 15, 2026
Latest reporting daySep 15, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectorlocal
Privilegesauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-20Improper Input Validation

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo