CVE-2024-33022

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while allocating memory in HGSL driver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; MDM9628; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6174A; QCA6391; QCA6564A; QCA6564AU
qualcommar8035_firmware<= *
qualcommcsra6620_firmware<= *
qualcommcsra6640_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommflight_rb5_5g_platform_firmware<= *
qualcommmdm9628_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8620p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6564a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqca6797aq_firmware<= *
qualcommqca8081_firmware<= *
qualcommqca8337_firmware<= *
qualcommqca9367_firmware<= *
qualcommqca9377_firmware<= *
qualcommqcc710_firmware<= *
qualcommqcm4325_firmware<= *
qualcommqcm6125_firmware<= *
qualcommqcm8550_firmware<= *
qualcommqcn6224_firmware<= *
qualcommqcn6274_firmware<= *
qualcommqcn9011_firmware<= *
qualcommqcn9012_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs610_firmware<= *
qualcommqcs6125_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqcs7230_firmware<= *
qualcommqcs8550_firmware<= *
qualcommqdu1000_firmware<= *
qualcommqdu1010_firmware<= *

References

Timeline

Published
Aug 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330237.8Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.CVE-2024-330247.5Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.CVE-2024-330257.5Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.CVE-2024-330267.5Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.CVE-2024-330277.8Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page tableCVE-2024-330287.8Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.CVE-2024-330296.7Memory corruption while handling the PDR in driver for getting the remote heap maps.CVE-2024-33035.7An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starCVE-2024-330306.7Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.CVE-2024-330316.7Memory corruption while processing the update SIM PB records request.CVE-2024-330326.7Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.CVE-2024-330337.8Memory corruption while processing IOCTL calls to unmap the buffers.
CVE-2024-33022: High severity, CVSS 7.8 | Vulnix