CVEvulnerability

CVE-2024-33039

6.7 MEDIUM Published 2024-12-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-822

Description

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Affected configurations

• qualcomm qam8255p firmware • qualcomm qam8650p firmware • qualcomm qam8775p firmware • qualcomm qamsrv1h firmware • qualcomm qamsrv1m firmware • qualcomm sa7255p firmware • qualcomm sa7775p firmware • qualcomm sa8255p firmware • qualcomm sa8620p firmware • qualcomm sa8650p firmware • qualcomm sa8770p firmware • qualcomm sa8775p firmware • qualcomm sa9000p firmware • qualcomm snapdragon w5\+ gen 1 wearable platform firmware • qualcomm srv1h firmware • qualcomm srv1m firmware • qualcomm sw5100 firmware • qualcomm sw5100p firmware • qualcomm wcn3980 firmware • qualcomm wcn3988 firmware • qualcomm wsa8830 firmware • qualcomm wsa8835 firmware

Related

Weakness · CWE (1)

  • CWE-822 Untrusted Pointer Dereference weakness

References