CVE-2024-33016

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

memory corruption when an invalid firehose patch command is invoked.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; 9205 LTE Modem; AQT1000; AR8031; AR8035; C-V2X 9150; CSR8811; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302
qualcomm315_5g_iot_modem_firmware<= *
qualcomm9205_lte_modem_firmware<= *
qualcommaqt1000_firmware<= *
qualcommar8031_firmware<= *
qualcommar8035_firmware<= *
qualcommc-v2x_9150_firmware<= *
qualcommcsr8811_firmware<= *
qualcommcsra6620_firmware<= *
qualcommcsra6640_firmware<= *
qualcommcsrb31024_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommflight_rb5_5g_platform_firmware<= *
qualcommimmersive_home_3210_platform_firmware<= *
qualcommimmersive_home_326_platform_firmware<= *
qualcommipq5300_firmware<= *
qualcommipq5302_firmware<= *
qualcommipq5312_firmware<= *
qualcommipq5332_firmware<= *
qualcommipq6000_firmware<= *
qualcommipq6005_firmware<= *
qualcommipq6010_firmware<= *
qualcommipq6018_firmware<= *
qualcommipq6028_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9554_firmware<= *
qualcommipq9570_firmware<= *
qualcommipq9574_firmware<= *
qualcommmdm9205s_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8620p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca0000_firmware<= *
qualcommqca4004_firmware<= *
qualcommqca4024_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6310_firmware<= *
qualcommqca6320_firmware<= *
qualcommqca6335_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6421_firmware<= *

References

Timeline

Published
Sep 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330187.5Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.CVE-2024-330197.5Transient DOS while parsing the received TID-to-link mapping action frame.CVE-2024-33023.7There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of MemoryCVE-2024-330207.5Transient DOS while processing TID-to-link mapping IE elements.CVE-2024-330217.8Memory corruption while processing IOCTL call to set metainfo.CVE-2024-330227.8Memory corruption while allocating memory in HGSL driver.CVE-2024-330237.8Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.CVE-2024-330247.5Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.CVE-2024-330257.5Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.CVE-2024-330267.5Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.CVE-2024-330277.8Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page tableCVE-2024-330287.8Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
CVE-2024-33016: Medium severity, CVSS 6.8 | Vulnix