CVE-2024-33034

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Aug 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-330358.4Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.CVE-2024-330366.7Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing w CVE-2024-330376.1Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received fr CVE-2024-330387.8Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.CVE-2024-330396.7Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.CVE-2024-330407.0Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space CVE-2024-330417.8Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,CVE-2024-330427.8Memory corruption when Alternative Frequency offset value is set to 255.CVE-2024-330435.5Transient DOS while handling PS event when Program Service name length offset value is set to 255.CVE-2024-330447.8Memory corruption while Configuring the SMR/S2CR register in Bypass mode.CVE-2024-330457.8Memory corruption when BTFM client sends new messages over Slimbus to ADSP.CVE-2024-330477.8Memory corruption when the captureRead QDCM command is invoked from user-space.