Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-43063 Details
Description
information disclosure while invoking the mailbox read API.
A buffer over-read vulnerability has been identified in various chipsets of Qualcomm Snapdragon products, specifically within the Automotive Autonomy technology area. This vulnerability allows information disclosure while invoking the mailbox read API, potentially leading to unauthorized access to sensitive data.
Qualcomm has notified customers about this vulnerability and is actively sharing patches with device manufacturers. Instructions for applying the patch can be found in the Qualcomm January 2025 Security Bulletin.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 6, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
| CWE-126 | Buffer Over-read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm qam8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8255p | All versions |
CPE
Remediation
| |
| qualcomm qam8295p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8295p | All versions |
CPE
Remediation
| |
| qualcomm qam8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8650p | All versions |
CPE
Remediation
| |
| qualcomm qam8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8775p | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1h firmware | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1h | All versions |
CPE
Remediation
| |
| qualcomm qca6595 firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6595 | All versions |
CPE
Remediation
| |
| qualcomm qca6595au firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6595au | All versions |
CPE
Remediation
| |
| qualcomm qca6696 firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6696 | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq | All versions |
CPE
Remediation
| |
| qualcomm sa8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8255p | All versions |
CPE
Remediation
| |
| qualcomm sa8295p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8295p | All versions |
CPE
Remediation
| |
| qualcomm sa8540p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8540p | All versions |
CPE
Remediation
| |
| qualcomm sa8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8650p | All versions |
CPE
Remediation
| |
| qualcomm sa8770p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8770p | All versions |
CPE
Remediation
| |
| qualcomm sa8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8775p | All versions |
CPE
Remediation
| |
| qualcomm sa9000p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa9000p | All versions |
CPE
Remediation
| |
| qualcomm srv1h firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1h | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 10, 2025 | Initial Analysis | [email protected] |
| Jan 6, 2025 | New CVE Received | [email protected] |