First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-33043

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8017; AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MSM8108; MSM8209; MSM8608; MSM8909W; MSM8996AU; QAM8255P; QAM8295P; QAM8775P; QCA6310; QCA6320; QCA6335; QCA6391; QCA6420

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Sep 2, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-330447.8Memory corruption while Configuring the SMR/S2CR register in Bypass mode.CVE-2024-330457.8Memory corruption when BTFM client sends new messages over Slimbus to ADSP.CVE-2024-330477.8Memory corruption when the captureRead QDCM command is invoked from user-space.CVE-2024-330487.5Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.CVE-2024-330497.5Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.CVE-2024-33057.5Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedde CVE-2024-330507.5Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.CVE-2024-330517.5Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.CVE-2024-330527.8Memory corruption when user provides data for FM HCI command control operations.CVE-2024-330536.7Memory corruption when multiple threads try to unregister the CVP buffer at the same time.CVE-2024-330547.8Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.CVE-2024-330557.8Memory corruption while invoking IOCTL calls to unmap the DMA buffers.

CVE-2024-33043: Medium severity, CVSS 5.5 | Vulnix