CVE-2024-53033
03.03.2025, 11:15
Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.Enginsight
| Vendor | Product | Version |
|---|---|---|
| qualcomm | fastconnect_6900_firmware | - |
| qualcomm | fastconnect_7800_firmware | - |
| qualcomm | sc8380xp_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcd9385_firmware | - |
| qualcomm | wsa8840_firmware | - |
| qualcomm | wsa8845_firmware | - |
| qualcomm | wsa8845h_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-822 - Untrusted Pointer DereferenceThe program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.