CVE-2024-33058

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-1220

Affected software

No affected versions have been published.

Timeline

Published
Apr 7, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330597.8Memory corruption while processing frame command IOCTL calls.CVE-2024-33067.5Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured AccesCVE-2024-330607.8Memory corruption when two threads try to map and unmap a single node simultaneously.CVE-2024-330615.5Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializingCVE-2024-330637.5Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element isCVE-2024-330648.2Information disclosure while parsing the multiple MBSSID IEs from the beacon.CVE-2024-330657.8Memory corruption while taking snapshot when an offset variable is set by camera driver.CVE-2024-330669.8Memory corruption while redirecting log file to any file location with any file name.CVE-2024-330675.5Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driCVE-2024-330686.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330697.5Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.CVE-2024-33075.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's att
CVE-2024-33058: High severity, CVSS 7.5 | Vulnix