CVE-2024-43060

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Mar 3, 2025
Updated: Mar 6, 2025
CWE ID 119
CWE ID 823

Summary

CVE-2024-43060 is a newly disclosed vulnerability that affects voice activation functionality in certain systems. During the process of loading sound model parameters from the Hardware Low-Level Operating System (HLOS) to the Advanced Speech Processing (ADSP) component, memory corruption occurs. This issue has the potential to be exploited by attackers to execute arbitrary code and gain unauthorized access to the system. The exact implications and potential impact of this vulnerability are still under investigation, but it poses a significant risk to security and should be addressed promptly through updates and patches provided by the affected vendors.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share