First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-33047

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption when the captureRead QDCM command is invoked from user-space.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6700; FastConnect 6900; FastConnect 7800; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8380XP; SDM429W; Snapdragon 429 Mobile Platform; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); WCD9370; WCD9375; WCD9380; WCD9385; WCN3620; WCN3660B; WSA8830
qualcomm	fastconnect_6700_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	qcm5430_firmware	<= *
qualcomm	qcm6490_firmware	<= *
qualcomm	qcs5430_firmware	<= *
qualcomm	qcs6490_firmware	<= *
qualcomm	qualcomm_video_collaboration_vc3_platform_firmware	<= *
qualcomm	sc8380xp_firmware	<= *
qualcomm	sdm429w_firmware	<= *
qualcomm	snapdragon_429_mobile_platform_firmware	<= *
qualcomm	wcd9370_firmware	<= *
qualcomm	wcd9375_firmware	<= *
qualcomm	wcd9380_firmware	<= *
qualcomm	wcd9385_firmware	<= *
qualcomm	wcn3620_firmware	<= *
qualcomm	wcn3660b_firmware	<= *
qualcomm	wsa8830_firmware	<= *
qualcomm	wsa8835_firmware	<= *
qualcomm	wsa8840_firmware	<= *
qualcomm	wsa8845_firmware	<= *
qualcomm	wsa8845h_firmware	<= *

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.htmlVendor Advisory

Timeline

Published: Sep 2, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-330487.5Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.CVE-2024-330497.5Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.CVE-2024-33057.5Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedde CVE-2024-330507.5Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.CVE-2024-330517.5Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.CVE-2024-330527.8Memory corruption when user provides data for FM HCI command control operations.CVE-2024-330536.7Memory corruption when multiple threads try to unregister the CVP buffer at the same time.CVE-2024-330547.8Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.CVE-2024-330557.8Memory corruption while invoking IOCTL calls to unmap the DMA buffers.CVE-2024-330567.8Memory corruption when allocating and accessing an entry in an SMEM partition continuously.CVE-2024-330577.5Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the locatio CVE-2024-330587.5Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

CVE-2024-33047: High severity, CVSS 7.8 | Vulnix