CVE-2024-33038

HIGH

Qualcomm Fastconnect 6700 Firmware - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 29.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-822 CWE-787
Status published
Products (45)
qualcomm/fastconnect_6700_firmware
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/qcm4490_firmware
qualcomm/qcm5430_firmware
qualcomm/qcm6490_firmware
qualcomm/qcm8550_firmware
qualcomm/qcs4490_firmware
qualcomm/qcs5430_firmware
qualcomm/qcs6490_firmware
... and 35 more
Published Sep 02, 2024
Tracked Since Feb 18, 2026