CVE-2024-33030

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6900; FastConnect 7800; QCA6584AU; QCA6698AQ; QCA8081; QCA8337; QCA9367; QCA9377; QCC710; QCN6224; QCN6274; QFW7114; QFW7124; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon X72 5G Modem-RF System; Snapdragon X75 5G Modem-RF System; WCD9340; WCD9380
qualcomm	ar8035_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	qca6584au_firmware	<= *
qualcomm	qca6698aq_firmware	<= *
qualcomm	qca8081_firmware	<= *
qualcomm	qca8337_firmware	<= *
qualcomm	qca9367_firmware	<= *
qualcomm	qca9377_firmware	<= *
qualcomm	qcc710_firmware	<= *
qualcomm	qcn6224_firmware	<= *
qualcomm	qcn6274_firmware	<= *
qualcomm	qfw7114_firmware	<= *
qualcomm	qfw7124_firmware	<= *
qualcomm	snapdragon_8_gen_1_mobile_platform_firmware	<= *
qualcomm	snapdragon_auto_5g_modem-rf_gen_2_firmware	<= *
qualcomm	snapdragon_x72_5g_modem-rf_system_firmware	<= *
qualcomm	snapdragon_x75_5g_modem-rf_system_firmware	<= *
qualcomm	wcd9340_firmware	<= *
qualcomm	wcd9380_firmware	<= *
qualcomm	wsa8830_firmware	<= *
qualcomm	wsa8835_firmware	<= *

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Nov 4, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-330316.7Memory corruption while processing the update SIM PB records request.CVE-2024-330326.7Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.CVE-2024-330337.8Memory corruption while processing IOCTL calls to unmap the buffers.CVE-2024-330347.8Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers CVE-2024-330358.4Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.CVE-2024-330366.7Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing w CVE-2024-330376.1Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received fr CVE-2024-330387.8Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.CVE-2024-330396.7Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.CVE-2024-330407.0Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space CVE-2024-330417.8Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,CVE-2024-330427.8Memory corruption when Alternative Frequency offset value is set to 255.