CVE-2024-43060CWE-823

Use of Out-of-range Pointer Offset in Automotive Audio

High · published March 3, 2025

CVSS v3.1

7.8

EPSS

0%

Percentile

1.6

In the wild

Unconfirmed

What it is

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00117 · 1.6th percentile
Weakness: CWE-823 · Use of Out-of-range Pointer Offset
Published: 2025-03-03T10:07Z

EPSS history

Timeline

03 MAR 10:07Z
Use of Out-of-range Pointer Offset in Automotive Audio
cvelistv5