CVE-2024-33032

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonC-V2X 9150; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6696; QCA8337; QCN9074; QCS410; QCS4490; QCS610; QSM8250; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform
qualcommc-v2x_9150_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca8337_firmware<= *
qualcommqcn9074_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs4490_firmware<= *
qualcommqcs610_firmware<= *
qualcommqsm8250_firmware<= *
qualcommqualcomm_video_collaboration_vc1_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsa8295p_firmware<= *
qualcommsa8530p_firmware<= *
qualcommsa8540p_firmware<= *
qualcommsa9000p_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsdx55_firmware<= *
qualcommsm7250p_firmware<= *
qualcommsnapdragon_4_gen_2_mobile_platform_firmware<= *
qualcommsnapdragon_690_5g_mobile_platform_firmware<= *
qualcommsnapdragon_750g_5g_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_865_5g_mobile_platform_firmware<= *
qualcommsnapdragon_x55_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_xr2_5g_platform_firmware<= *
qualcommsw5100_firmware<= *
qualcommsw5100p_firmware<= *
qualcommsxr2130_firmware<= *
qualcommtalynplus_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9375_firmware<= *
qualcommwcd9380_firmware<= *

References

Timeline

Published
Nov 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330337.8Memory corruption while processing IOCTL calls to unmap the buffers.CVE-2024-330347.8Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffersCVE-2024-330358.4Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.CVE-2024-330366.7Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing wCVE-2024-330376.1Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received frCVE-2024-330387.8Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.CVE-2024-330396.7Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.CVE-2024-330407.0Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel spaceCVE-2024-330417.8Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,CVE-2024-330427.8Memory corruption when Alternative Frequency offset value is set to 255.CVE-2024-330435.5Transient DOS while handling PS event when Program Service name length offset value is set to 255.CVE-2024-330447.8Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2024-33032: Medium severity, CVSS 6.7 | Vulnix