CVE-2024-33041
06.01.2025, 11:15
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,Enginsight
| Vendor | Product | Version |
|---|---|---|
| qualcomm | fastconnect_6900_firmware | - |
| qualcomm | fastconnect_7800_firmware | - |
| qualcomm | qam8295p_firmware | - |
| qualcomm | qca6574au_firmware | - |
| qualcomm | qca6696_firmware | - |
| qualcomm | qcm8550_firmware | - |
| qualcomm | qcs6490_firmware | - |
| qualcomm | qcs8550_firmware | - |
| qualcomm | video_collaboration_vc3_firmware | - |
| qualcomm | sa6145p_firmware | - |
| qualcomm | sa6150p_firmware | - |
| qualcomm | sa6155p_firmware | - |
| qualcomm | sa8145p_firmware | - |
| qualcomm | sa8150p_firmware | - |
| qualcomm | sa8155p_firmware | - |
| qualcomm | sa8195p_firmware | - |
| qualcomm | sa8295p_firmware | - |
| qualcomm | sg8275p_firmware | - |
| qualcomm | sm8550p_firmware | - |
| qualcomm | snapdragon_8_gen_2_mobile_firmware | - |
| qualcomm | snapdragon_8_gen_3_mobile_firmware | - |
| qualcomm | snapdragon_8\+_gen_2_mobile_firmware | - |
| qualcomm | ssg2115p_firmware | - |
| qualcomm | ssg2125p_firmware | - |
| qualcomm | sxr1230p_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcd9385_firmware | - |
| qualcomm | wcd9390_firmware | - |
| qualcomm | wcd9395_firmware | - |
| qualcomm | wsa8830_firmware | - |
| qualcomm | wsa8832_firmware | - |
| qualcomm | wsa8835_firmware | - |
| qualcomm | wsa8840_firmware | - |
| qualcomm | wsa8845_firmware | - |
| qualcomm | wsa8845h_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-823 - Use of Out-of-range Pointer OffsetThe program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.