CVE-2024-33067

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jan 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330686.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330697.5Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.CVE-2024-33075.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attCVE-2024-330707.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330717.5Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.CVE-2024-330738.2Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.CVE-2024-330789.8Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code executionCVE-2024-33085.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's atCVE-2024-33095.4The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all vCVE-2024-331016.1A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrarCVE-2024-331025.4A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitraCVE-2024-331036.1An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by
CVE-2024-33067: Medium severity, CVSS 5.5 | Vulnix