CVE-2024-33035

High

Description

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

SeverityHigh
CVSS8.4
Exploit probability—
ProductQualcomm Qam8255p Firmware
PublishedSep 2, 2024
First seenSep 2, 2024

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm qam8255p_firmwareNo range specified—
qualcomm qam8620p_firmwareNo range specified—
qualcomm qam8650p_firmwareNo range specified—
qualcomm qam8775p_firmwareNo range specified—
qualcomm qamsrv1h_firmwareNo range specified—
qualcomm qamsrv1m_firmwareNo range specified—
qualcomm qca6391_firmwareNo range specified—
qualcomm qca6426_firmwareNo range specified—
qualcomm qca6436_firmwareNo range specified—
qualcomm qca6574_firmwareNo range specified—
qualcomm qca6574a_firmwareNo range specified—
qualcomm qca6574au_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qca6696_firmwareNo range specified—
qualcomm qcm4490_firmwareNo range specified—
qualcomm qcs4490_firmwareNo range specified—
qualcomm qcs6490_firmwareNo range specified—
qualcomm video_collaboration_vc3_platform_firmwareNo range specified—
qualcomm sa4150p_firmwareNo range specified—
qualcomm sa4155p_firmwareNo range specified—
qualcomm sa6145p_firmwareNo range specified—
qualcomm sa6150p_firmwareNo range specified—
qualcomm sa6155_firmwareNo range specified—
qualcomm sa6155p_firmwareNo range specified—
qualcomm sa7255p_firmwareNo range specified—
qualcomm sa7775p_firmwareNo range specified—
qualcomm sa8145p_firmwareNo range specified—
qualcomm sa8150p_firmwareNo range specified—
qualcomm sa8155_firmwareNo range specified—
qualcomm sa8155p_firmwareNo range specified—
qualcomm sa8195p_firmwareNo range specified—
qualcomm sa8255p_firmwareNo range specified—
qualcomm sa8530p_firmwareNo range specified—
qualcomm sa8540p_firmwareNo range specified—
qualcomm sa8620p_firmwareNo range specified—
qualcomm sa8650p_firmwareNo range specified—
qualcomm sa8770p_firmwareNo range specified—
qualcomm sa8775p_firmwareNo range specified—
qualcomm sa9000p_firmwareNo range specified—
qualcomm sd_8_gen1_5g_firmwareNo range specified—
qualcomm fastconnect_6200_firmwareNo range specified—
qualcomm fastconnect_6700_firmwareNo range specified—
qualcomm fastconnect_6800_firmwareNo range specified—
qualcomm fastconnect_6900_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm sd865_5g_firmwareNo range specified—
qualcomm sm4125_firmwareNo range specified—
qualcomm sm6370_firmwareNo range specified—
qualcomm snapdragon_4_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_4_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_460_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_480_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmwareNo range specified—
qualcomm snapdragon_662_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_680_4g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmwareNo range specified—
qualcomm snapdragon_695_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8\+_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_865_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmwareNo range specified—
qualcomm snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmwareNo range specified—
qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmwareNo range specified—
qualcomm snapdragon_x55_5g_modem-rf_system_firmwareNo range specified—
qualcomm snapdragon_xr2_5g_platform_firmwareNo range specified—
qualcomm srv1h_firmwareNo range specified—
qualcomm srv1l_firmwareNo range specified—
qualcomm srv1m_firmwareNo range specified—
qualcomm ssg2115p_firmwareNo range specified—
qualcomm ssg2125p_firmwareNo range specified—
qualcomm sw5100_firmwareNo range specified—
qualcomm sw5100p_firmwareNo range specified—
qualcomm sxr1230p_firmwareNo range specified—
qualcomm sxr2130_firmwareNo range specified—
qualcomm talynplus_firmwareNo range specified—
qualcomm wcd9326_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcn3910_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3988_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.