Android warns of Qualcomm exploit in latest security bulletin
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-43047 | Use-After-Free in Qualcomm FastConnect and QCA Chipset Firmware | 7.8 | <1% | KEV | KEV |
| CVE-2024-43093 | Local Privilege Escalation via Unicode Path Filter Bypass in Android Framework | 7.3 | <1% | KEV | KEV |
From the original article
3 min read at cyberscoop.com
The November security bulletin includes two CVE's reportedly exploited in the wild. Android’s monthly security bulletin published Monday warns of two vulnerabilities with “limited, targeted exploitation” in the wild. One vulnerability impacts Qualcomm chipsets via a use-after-free vulnerability in its FastRPC driver.
By @chrismvasq · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.