CVE-2024-33052

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption when user provides data for FM HCI command control operations.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330536.7Memory corruption when multiple threads try to unregister the CVP buffer at the same time.CVE-2024-330547.8Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.CVE-2024-330557.8Memory corruption while invoking IOCTL calls to unmap the DMA buffers.CVE-2024-330567.8Memory corruption when allocating and accessing an entry in an SMEM partition continuously.CVE-2024-330577.5Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the locatioCVE-2024-330587.5Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.CVE-2024-330597.8Memory corruption while processing frame command IOCTL calls.CVE-2024-33067.5Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured AccesCVE-2024-330607.8Memory corruption when two threads try to map and unmap a single node simultaneously.CVE-2024-330615.5Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializingCVE-2024-330637.5Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element isCVE-2024-330648.2Information disclosure while parsing the multiple MBSSID IEs from the beacon.
CVE-2024-33052: High severity, CVSS 7.8 | Vulnix