CVE-2024-49843: High Severity Vulnerability in QCOM Open Source Graphics Kernel Package
Summary
CVE-2024-49843: ... Affects platform/vendor/qcom/opensource/graphics-kernel versions >= SoCVersion:0, < SoCVersion:2025-02-05. Fixed in SoCVersion:2025-02-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The QCOM Open Source Graphics Kernel package is an integral component of the Android ecosystem, responsible for managing graphics processing and rendering tasks on Qualcomm chipsets. This package plays a crucial role in ensuring efficient graphics performance and stability across various Android devices. However, it has been identified to contain a high-severity vulnerability that could potentially compromise system integrity.
Vulnerability Detail
The vulnerability, identified as CVE-2024-49843, originates from a flaw in the adreno_hwsched.c file within the graphics kernel. This issue could allow unauthorized access or manipulation of graphics processing tasks, leading to potential system crashes or exploitation by malicious entities. The vulnerability affects versions of the package prior to the fix released on February 5, 2025, and poses significant risks to devices utilizing affected versions.
How To Fix
Minimum fixed version
SoCVersion:2025-02-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
In summary, CVE-2024-49843 is a critical vulnerability in the QCOM Open Source Graphics Kernel package that requires immediate attention. Users are advised to update to the patched version to mitigate risks associated with this vulnerability. Regular monitoring and updates are essential to maintain system security.
See every vulnerability recorded for platform/vendor/qcom/opensource/graphics-kernel →
FAQ
CVE-2024-49843 is a high-severity vulnerability found in the QCOM Open Source Graphics Kernel package that could allow unauthorized access to graphics processing tasks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The risks include potential unauthorized access, manipulation of graphics tasks, system crashes, and exploitation by malicious actors.
You can update the package by running 'sudo apt-get update && sudo apt-get upgrade' in your terminal to ensure you have the latest version with the fix.
Currently, there are no specific workarounds available. It is recommended to apply the patch as soon as it is released.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom/opensource/graphics-kernel.
