Qualcomm patches high-severity zero-day exploited in attacks

Qualcomm released patches for a critical DSP use-after-free zero-day (CVE-2024-43047) that impacts dozens of chipsets and has indications of limited, targeted in-the-wild exploitation reported by Google Threat Analysis Group and Amnesty International Security Lab; OEMs are urged to deploy updates promptly and users should check device-specific patch status.