Today > 4 Critical | 28 High | 33 Medium | 4 Low vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-33033

Nov. 7, 2024, 7:39 p.m.

CVSS Score

6.7 / 10

Products Impacted

Vendor Product Versions
qualcomm
  • wsa8845h_firmware
  • wsa8845h
  • wsa8845_firmware
  • wsa8845
  • wsa8840_firmware
  • wsa8840
  • wsa8835_firmware
  • wsa8835
  • wsa8832_firmware
  • wsa8832
  • wsa8830_firmware
  • wsa8830
  • wcn7880_firmware
  • wcn7880
  • wcn6755_firmware
  • wcn6755
  • wcn6650_firmware
  • wcn6650
  • wcd9395_firmware
  • wcd9395
  • wcd9390_firmware
  • wcd9390
  • wcd9385_firmware
  • wcd9385
  • wcd9380_firmware
  • wcd9380
  • wcd9378_firmware
  • wcd9378
  • wcd9375_firmware
  • wcd9375
  • wcd9371_firmware
  • wcd9371
  • wcd9370_firmware
  • wcd9370
  • snapdragon_8\+_gen_2_mobile_platform_firmware
  • snapdragon_8\+_gen_2_mobile_platform
  • snapdragon_8_gen_2_mobile_platform_firmware
  • snapdragon_8_gen_2_mobile_platform
  • sm8550p_firmware
  • sm8550p
  • sm7550_firmware
  • sm7550
  • sm7525_firmware
  • sm7525
  • sg8275p_firmware
  • sg8275p
  • sg8275_firmware
  • sg8275
  • qcs8550_firmware
  • qcs8550
  • qcm8550_firmware
  • qcm8550
  • fastconnect_7800_firmware
  • fastconnect_7800
  • fastconnect_6900_firmware
  • fastconnect_6900
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Description

Memory corruption while processing IOCTL calls to unmap the buffers.

Weaknesses

CWE-416
Use After Free

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CWE ID: 416

Date

Published: Nov. 4, 2024, 10:15 a.m.

Last Modified: Nov. 7, 2024, 7:39 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm wsa8845h_firmware - / / / / / / /
h qualcomm wsa8845h - / / / / / / /
o qualcomm wsa8845_firmware - / / / / / / /
h qualcomm wsa8845 - / / / / / / /
o qualcomm wsa8840_firmware - / / / / / / /
h qualcomm wsa8840 - / / / / / / /
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /
o qualcomm wsa8832_firmware - / / / / / / /
h qualcomm wsa8832 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wcn7880_firmware - / / / / / / /
h qualcomm wcn7880 - / / / / / / /
o qualcomm wcn6755_firmware - / / / / / / /
h qualcomm wcn6755 - / / / / / / /
o qualcomm wcn6650_firmware - / / / / / / /
h qualcomm wcn6650 - / / / / / / /
o qualcomm wcd9395_firmware - / / / / / / /
h qualcomm wcd9395 - / / / / / / /
o qualcomm wcd9390_firmware - / / / / / / /
h qualcomm wcd9390 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9378_firmware - / / / / / / /
h qualcomm wcd9378 - / / / / / / /
o qualcomm wcd9375_firmware - / / / / / / /
h qualcomm wcd9375 - / / / / / / /
o qualcomm wcd9371_firmware - / / / / / / /
h qualcomm wcd9371 - / / / / / / /
o qualcomm wcd9370_firmware - / / / / / / /
h qualcomm wcd9370 - / / / / / / /
o qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8\+_gen_2_mobile_platform - / / / / / / /
o qualcomm snapdragon_8_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_2_mobile_platform - / / / / / / /
o qualcomm sm8550p_firmware - / / / / / / /
h qualcomm sm8550p - / / / / / / /
o qualcomm sm7550_firmware - / / / / / / /
h qualcomm sm7550 - / / / / / / /
o qualcomm sm7525_firmware - / / / / / / /
h qualcomm sm7525 - / / / / / / /
o qualcomm sg8275p_firmware - / / / / / / /
h qualcomm sg8275p - / / / / / / /
o qualcomm sg8275_firmware - / / / / / / /
h qualcomm sg8275 - / / / / / / /
o qualcomm qcs8550_firmware - / / / / / / /
h qualcomm qcs8550 - / / / / / / /
o qualcomm qcm8550_firmware - / / / / / / /
h qualcomm qcm8550 - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score
6.7
Exploitability Score
0.8
Impact Score
5.9
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://docs.qualcomm.com/ product-security@qualcomm.com