CVE-2024-33042: Buffer Copy Without Checking Size of Input…

Record summary

CVE-2024-33042 has a selected CVSS score of 7.8 (high).

Description

Memory corruption when Alternative Frequency offset value is set to 255.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 4, 2024 · Source: CVE List

Affected products and versions

Showing 12 of 100Source data: 100 of 180 entries available

Product	Source	Version range	Status
Snapdragon Browse Qualcomm, Inc. / Snapdragon Default status: unaffected	CVE List	APQ8017	affected
		AQT1000	affected
		FastConnect 6200	affected
		FastConnect 6700	affected
		FastConnect 6800	affected
		FastConnect 6900	affected
		FastConnect 7800	affected
		MSM8108	affected
		MSM8209	affected
		MSM8608	affected
		MSM8909W	affected
		MSM8996AU	affected
		Showing 12 of 202 version ranges
apq8017_firmware Browse qualcomm / apq8017_firmware Default status: unknown	CVE List	Through *	affected
aqt1000_firmware Browse qualcomm / aqt1000_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_6200_firmware Browse qualcomm / fastconnect_6200_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_6700_firmware Browse qualcomm / fastconnect_6700_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_6800_firmware Browse qualcomm / fastconnect_6800_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_6900_firmware Browse qualcomm / fastconnect_6900_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_7800_firmware Browse qualcomm / fastconnect_7800_firmware Default status: unknown	CVE List	Through *	affected
msm8108_firmware Browse qualcomm / msm8108_firmware Default status: unknown	CVE List	Through *	affected
msm8209_firmware Browse qualcomm / msm8209_firmware Default status: unknown	CVE List	Through *	affected
msm8608_firmware Browse qualcomm / msm8608_firmware Default status: unknown	CVE List	Through *	affected
msm8909w_firmware Browse qualcomm / msm8909w_firmware Default status: unknown	CVE List	Through *	affected

References

docs.qualcomm.com

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-33042

CVE-2024-33042

Record summary

Description

Exploitation context

CISA SSVC decision

Affected products and versions

Snapdragon

apq8017_firmware

aqt1000_firmware

fastconnect_6200_firmware

fastconnect_6700_firmware

fastconnect_6800_firmware

fastconnect_6900_firmware

fastconnect_7800_firmware

msm8108_firmware

msm8209_firmware

msm8608_firmware

msm8909w_firmware

References