CVE-2024-33034

HIGH

Qualcomm FastConnect and Flight RB5 5G Platform Firmware - Use-After-Free in GPU SMMU Mappings

Title source: llm
STIX 2.1

Description

Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

References (1)

Core 1

Scores

CVSS v3 8.4
EPSS 0.0015
EPSS Percentile 35.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (50)
qualcomm/fastconnect_6200_firmware
qualcomm/fastconnect_6700_firmware
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/flight_rb5_5g_platform_firmware
qualcomm/qam8255p_firmware
qualcomm/qam8295p_firmware
qualcomm/qam8620p_firmware
qualcomm/qam8650p_firmware
qualcomm/qam8775p_firmware
... and 40 more
Published Aug 05, 2024
Tracked Since Feb 18, 2026