Qualcomm urges device makers to push patches after 'targeted' exploitation

Qualcomm published 20 firmware/security patches addressing multiple high- and medium-severity flaws; notably CVE-2024-43047 (CVSS 7.8) in the DSP/FASTRPC driver has been observed exploited in the wild with indications of targeted use by nation-state or commercial surveillance actors. The fixes affect Snapdragon 660+ devices, Qualcomm 5G modems, and FastConnect 6700/6800/6900/7800 kits; OEMs are strongly advised to deploy updates immediately. Other notable issues include a CVSS 9.8 WLAN resource manager flaw (CVE-2024-33066) and memory corruption bugs in camera and OS components.