First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-33055

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while invoking IOCTL calls to unmap the DMA buffers.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6900; FastConnect 7800; QAM8295P; QCA6574AU; QCA6696; QCM8550; QCS6490; QCS8550; Qualcomm Video Collaboration VC3 Platform; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; SA8295P; SD 8 Gen1 5G; SG8275P; SM8550P

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Jan 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-330567.8Memory corruption when allocating and accessing an entry in an SMEM partition continuously.CVE-2024-330577.5Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the locatio CVE-2024-330587.5Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.CVE-2024-330597.8Memory corruption while processing frame command IOCTL calls.CVE-2024-33067.5Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Acces CVE-2024-330607.8Memory corruption when two threads try to map and unmap a single node simultaneously.CVE-2024-330615.5Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing CVE-2024-330637.5Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is CVE-2024-330648.2Information disclosure while parsing the multiple MBSSID IEs from the beacon.CVE-2024-330657.8Memory corruption while taking snapshot when an offset variable is set by camera driver.CVE-2024-330669.8Memory corruption while redirecting log file to any file location with any file name.CVE-2024-330675.5Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model dri

CVE-2024-33055: High severity, CVSS 7.8 | Vulnix