Today > | 1 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-33032

Nov. 7, 2024, 7:59 p.m.

CVSS Score

6.7 / 10

Products Impacted

Vendor Product Versions
qualcomm
  • wsa8835_firmware
  • wsa8835
  • wsa8832_firmware
  • wsa8832
  • wsa8830_firmware
  • wsa8830
  • wsa8815_firmware
  • wsa8815
  • wsa8810_firmware
  • wsa8810
  • wcn3988_firmware
  • wcn3988
  • wcn3980_firmware
  • wcn3980
  • wcn3950_firmware
  • wcn3950
  • wcn3680b_firmware
  • wcn3680b
  • wcn3660b_firmware
  • wcn3660b
  • wcn3610_firmware
  • wcn3610
  • wcd9385_firmware
  • wcd9385
  • wcd9380_firmware
  • wcd9380
  • wcd9375_firmware
  • wcd9375
  • wcd9370_firmware
  • wcd9370
  • wcd9341_firmware
  • wcd9341
  • talynplus_firmware
  • talynplus
  • sxr2130_firmware
  • sxr2130
  • sw5100p_firmware
  • sw5100p
  • sw5100_firmware
  • sw5100
  • snapdragon_xr2_5g_platform_firmware
  • snapdragon_xr2_5g_platform
  • snapdragon_x55_5g_modem-rf_system_firmware
  • snapdragon_x55_5g_modem-rf_system
  • snapdragon_wear_4100\+_platform_firmware
  • snapdragon_wear_4100\+_platform
  • snapdragon_w5\+_gen_1_wearable_platform_firmware
  • snapdragon_w5\+_gen_1_wearable_platform
  • snapdragon_870_5g_mobile_platform_firmware
  • snapdragon_870_5g_mobile_platform
  • snapdragon_865\+_5g_mobile_platform_firmware
  • snapdragon_865\+_5g_mobile_platform
  • snapdragon_865_5g_mobile_platform_firmware
  • snapdragon_865_5g_mobile_platform
  • snapdragon_8\+_gen_1_mobile_platform_firmware
  • snapdragon_8\+_gen_1_mobile_platform
  • snapdragon_8_gen_1_mobile_platform_firmware
  • snapdragon_8_gen_1_mobile_platform
  • snapdragon_768g_5g_mobile_platform_firmware
  • snapdragon_768g_5g_mobile_platform
  • snapdragon_765g_5g_mobile_platform_firmware
  • snapdragon_765g_5g_mobile_platform
  • snapdragon_765_5g_mobile_platform_firmware
  • snapdragon_765_5g_mobile_platform
  • snapdragon_750g_5g_mobile_platform_firmware
  • snapdragon_750g_5g_mobile_platform
  • snapdragon_690_5g_mobile_platform_firmware
  • snapdragon_690_5g_mobile_platform
  • snapdragon_4_gen_2_mobile_platform_firmware
  • snapdragon_4_gen_2_mobile_platform
  • sm7250p_firmware
  • sm7250p
  • sdx55_firmware
  • sdx55
  • sd865_5g_firmware
  • sd865_5g
  • sa9000p_firmware
  • sa9000p
  • sa8540p_firmware
  • sa8540p
  • sa8530p_firmware
  • sa8530p
  • sa8295p_firmware
  • sa8295p
  • sa8195p_firmware
  • sa8195p
  • sa8155p_firmware
  • sa8155p
  • sa8150p_firmware
  • sa8150p
  • sa8145p_firmware
  • sa8145p
  • sa6155p_firmware
  • sa6155p
  • sa6150p_firmware
  • sa6150p
  • sa6145p_firmware
  • sa6145p
  • video_collaboration_vc3_platform_firmware
  • video_collaboration_vc3_platform
  • video_collaboration_vc1_platform_firmware
  • video_collaboration_vc1_platform
  • qsm8250_firmware
  • qsm8250
  • qcs610_firmware
  • qcs610
  • qcs4490_firmware
  • qcs4490
  • qcs410_firmware
  • qcs410
  • qcn9074_firmware
  • qcn9074
  • qca8337_firmware
  • qca8337
  • qca6696_firmware
  • qca6696
  • qca6574au_firmware
  • qca6574au
  • qca6436_firmware
  • qca6436
  • qca6426_firmware
  • qca6426
  • qca6391_firmware
  • qca6391
  • qam8295p_firmware
  • qam8295p
  • fastconnect_7800_firmware
  • fastconnect_7800
  • fastconnect_6900_firmware
  • fastconnect_6900
  • fastconnect_6800_firmware
  • fastconnect_6800
  • fastconnect_6700_firmware
  • fastconnect_6700
  • fastconnect_6200_firmware
  • fastconnect_6200
  • c-v2x_9150_firmware
  • c-v2x_9150
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Description

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Weaknesses

CWE-129
Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

CWE ID: 129

Date

Published: Nov. 4, 2024, 10:15 a.m.

Last Modified: Nov. 7, 2024, 7:59 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /
o qualcomm wsa8832_firmware - / / / / / / /
h qualcomm wsa8832 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wsa8815_firmware - / / / / / / /
h qualcomm wsa8815 - / / / / / / /
o qualcomm wsa8810_firmware - / / / / / / /
h qualcomm wsa8810 - / / / / / / /
o qualcomm wcn3988_firmware - / / / / / / /
h qualcomm wcn3988 - / / / / / / /
o qualcomm wcn3980_firmware - / / / / / / /
h qualcomm wcn3980 - / / / / / / /
o qualcomm wcn3950_firmware - / / / / / / /
h qualcomm wcn3950 - / / / / / / /
o qualcomm wcn3680b_firmware - / / / / / / /
h qualcomm wcn3680b - / / / / / / /
o qualcomm wcn3660b_firmware - / / / / / / /
h qualcomm wcn3660b - / / / / / / /
o qualcomm wcn3610_firmware - / / / / / / /
h qualcomm wcn3610 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9375_firmware - / / / / / / /
h qualcomm wcd9375 - / / / / / / /
o qualcomm wcd9370_firmware - / / / / / / /
h qualcomm wcd9370 - / / / / / / /
o qualcomm wcd9341_firmware - / / / / / / /
h qualcomm wcd9341 - / / / / / / /
o qualcomm talynplus_firmware - / / / / / / /
h qualcomm talynplus - / / / / / / /
o qualcomm sxr2130_firmware - / / / / / / /
h qualcomm sxr2130 - / / / / / / /
o qualcomm sw5100p_firmware - / / / / / / /
h qualcomm sw5100p - / / / / / / /
o qualcomm sw5100_firmware - / / / / / / /
h qualcomm sw5100 - / / / / / / /
o qualcomm snapdragon_xr2_5g_platform_firmware - / / / / / / /
h qualcomm snapdragon_xr2_5g_platform - / / / / / / /
o qualcomm snapdragon_x55_5g_modem-rf_system_firmware - / / / / / / /
h qualcomm snapdragon_x55_5g_modem-rf_system - / / / / / / /
o qualcomm snapdragon_wear_4100\+_platform_firmware - / / / / / / /
h qualcomm snapdragon_wear_4100\+_platform - / / / / / / /
o qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmware - / / / / / / /
h qualcomm snapdragon_w5\+_gen_1_wearable_platform - / / / / / / /
o qualcomm snapdragon_870_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_870_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_865\+_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_865\+_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_865_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_865_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_8\+_gen_1_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8\+_gen_1_mobile_platform - / / / / / / /
o qualcomm snapdragon_8_gen_1_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_1_mobile_platform - / / / / / / /
o qualcomm snapdragon_768g_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_768g_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_765g_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_765g_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_765_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_765_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_750g_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_750g_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_690_5g_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_690_5g_mobile_platform - / / / / / / /
o qualcomm snapdragon_4_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_4_gen_2_mobile_platform - / / / / / / /
o qualcomm sm7250p_firmware - / / / / / / /
h qualcomm sm7250p - / / / / / / /
o qualcomm sdx55_firmware - / / / / / / /
h qualcomm sdx55 - / / / / / / /
o qualcomm sd865_5g_firmware - / / / / / / /
h qualcomm sd865_5g - / / / / / / /
o qualcomm sa9000p_firmware - / / / / / / /
h qualcomm sa9000p - / / / / / / /
o qualcomm sa8540p_firmware - / / / / / / /
h qualcomm sa8540p - / / / / / / /
o qualcomm sa8530p_firmware - / / / / / / /
h qualcomm sa8530p - / / / / / / /
o qualcomm sa8295p_firmware - / / / / / / /
h qualcomm sa8295p - / / / / / / /
o qualcomm sa8195p_firmware - / / / / / / /
h qualcomm sa8195p - / / / / / / /
o qualcomm sa8155p_firmware - / / / / / / /
h qualcomm sa8155p - / / / / / / /
o qualcomm sa8150p_firmware - / / / / / / /
h qualcomm sa8150p - / / / / / / /
o qualcomm sa8145p_firmware - / / / / / / /
h qualcomm sa8145p - / / / / / / /
o qualcomm sa6155p_firmware - / / / / / / /
h qualcomm sa6155p - / / / / / / /
o qualcomm sa6150p_firmware - / / / / / / /
h qualcomm sa6150p - / / / / / / /
o qualcomm sa6145p_firmware - / / / / / / /
h qualcomm sa6145p - / / / / / / /
o qualcomm video_collaboration_vc3_platform_firmware - / / / / / / /
h qualcomm video_collaboration_vc3_platform - / / / / / / /
o qualcomm video_collaboration_vc1_platform_firmware - / / / / / / /
h qualcomm video_collaboration_vc1_platform - / / / / / / /
o qualcomm qsm8250_firmware - / / / / / / /
h qualcomm qsm8250 - / / / / / / /
o qualcomm qcs610_firmware - / / / / / / /
h qualcomm qcs610 - / / / / / / /
o qualcomm qcs4490_firmware - / / / / / / /
h qualcomm qcs4490 - / / / / / / /
o qualcomm qcs410_firmware - / / / / / / /
h qualcomm qcs410 - / / / / / / /
o qualcomm qcn9074_firmware - / / / / / / /
h qualcomm qcn9074 - / / / / / / /
o qualcomm qca8337_firmware - / / / / / / /
h qualcomm qca8337 - / / / / / / /
o qualcomm qca6696_firmware - / / / / / / /
h qualcomm qca6696 - / / / / / / /
o qualcomm qca6574au_firmware - / / / / / / /
h qualcomm qca6574au - / / / / / / /
o qualcomm qca6436_firmware - / / / / / / /
h qualcomm qca6436 - / / / / / / /
o qualcomm qca6426_firmware - / / / / / / /
h qualcomm qca6426 - / / / / / / /
o qualcomm qca6391_firmware - / / / / / / /
h qualcomm qca6391 - / / / / / / /
o qualcomm qam8295p_firmware - / / / / / / /
h qualcomm qam8295p - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /
o qualcomm fastconnect_6800_firmware - / / / / / / /
h qualcomm fastconnect_6800 - / / / / / / /
o qualcomm fastconnect_6700_firmware - / / / / / / /
h qualcomm fastconnect_6700 - / / / / / / /
o qualcomm fastconnect_6200_firmware - / / / / / / /
h qualcomm fastconnect_6200 - / / / / / / /
o qualcomm c-v2x_9150_firmware - / / / / / / /
h qualcomm c-v2x_9150 - / / / / / / /

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score
6.7
Exploitability Score
0.8
Impact Score
5.9
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://docs.qualcomm.com/ product-security@qualcomm.com