{"id":57341,"date":"2024-10-09T13:54:54","date_gmt":"2024-10-09T13:54:54","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/36447\/Qualcomm-Urges-Patching-After-Targeted-Exploitation.html"},"modified":"2024-10-09T13:54:54","modified_gmt":"2024-10-09T13:54:54","slug":"qualcomm-urges-patching-after-targeted-exploitation","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/qualcomm-urges-patching-after-targeted-exploitation\/","title":{"rendered":"Qualcomm Urges Patching After Targeted Exploitation"},"content":{"rendered":"

Qualcomm has issued 20 patches for its chipsets’ firmware, including one Digital Signal Processor (DSP) software flaw that has been exploited in the wild.<\/p>\n

That vulnerability, CVE-2024-43047<\/a>, carries a CVSS 7.8-out-of-10 severity rating, and was notably reported by both Google’s Project Zero team and Amnesty International’s code testers. The involvement of the latter indicates this bug has been exploited by either nation-state attackers or commercial surveillanceware vendors, or both.<\/p>\n

“There are indications from Google Threat Analysis Group that CVE-2024-43047 may be under limited, targeted exploitation,” Qualcomm said in its advisory<\/a> for the updates. “Patches for the issue affecting the FASTRPC driver have been made available to OEMs together with a strong recommendation to deploy the update on affected devices as soon as possible.”<\/p>\n