CVE-2024-33038

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6700; FastConnect 6900; FastConnect 7800; QCM4490; QCM5430; QCM6490; QCM8550; QCS4490; QCS5430; QCS6490; QCS8550; Qualcomm Video Collaboration VC3 Platform; SD 8 Gen1 5G; SG8275P; SM8550P; SM8635; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqcm4490_firmware<= *
qualcommqcm5430_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcm8550_firmware<= *
qualcommqcs4490_firmware<= *
qualcommqcs5430_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqcs8550_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommsd_8_gen1_5g_firmware<= *
qualcommsg8275p_firmware<= *
qualcommsm8550p_firmware<= *
qualcommsm8635_firmware<= *
qualcommsnapdragon_4_gen_2_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_1_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_2_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_3_mobile_platform_firmware<= *
qualcommsnapdragon_ar2_gen_1_platform_firmware<= *
qualcommssg2115p_firmware<= *
qualcommssg2125p_firmware<= *
qualcommsxr1230p_firmware<= *
qualcommtalynplus_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9375_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcd9385_firmware<= *
qualcommwcd9390_firmware<= *
qualcommwcd9395_firmware<= *
qualcommwcn3950_firmware<= *
qualcommwcn3988_firmware<= *
qualcommwcn6740_firmware<= *
qualcommwcn6755_firmware<= *
qualcommwsa8810_firmware<= *
qualcommwsa8815_firmware<= *
qualcommwsa8830_firmware<= *
qualcommwsa8832_firmware<= *
qualcommwsa8835_firmware<= *
qualcommwsa8840_firmware<= *
qualcommwsa8845_firmware<= *
qualcommwsa8845h_firmware<= *

References

Timeline

Published
Sep 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330396.7Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.CVE-2024-330407.0Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel spaceCVE-2024-330417.8Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,CVE-2024-330427.8Memory corruption when Alternative Frequency offset value is set to 255.CVE-2024-330435.5Transient DOS while handling PS event when Program Service name length offset value is set to 255.CVE-2024-330447.8Memory corruption while Configuring the SMR/S2CR register in Bypass mode.CVE-2024-330457.8Memory corruption when BTFM client sends new messages over Slimbus to ADSP.CVE-2024-330477.8Memory corruption when the captureRead QDCM command is invoked from user-space.CVE-2024-330487.5Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.CVE-2024-330497.5Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.CVE-2024-33057.5Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve EmbeddeCVE-2024-330507.5Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
CVE-2024-33038: High severity, CVSS 7.8 | Vulnix