7.8

CVE-2024-33033

Memory corruption while processing IOCTL calls to unmap the buffers.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
QualcommWsa8845h Firmware Version-
   QualcommWsa8845h Version-
QualcommWsa8845 Firmware Version-
   QualcommWsa8845 Version-
QualcommWsa8840 Firmware Version-
   QualcommWsa8840 Version-
QualcommWsa8835 Firmware Version-
   QualcommWsa8835 Version-
QualcommWsa8832 Firmware Version-
   QualcommWsa8832 Version-
QualcommWsa8830 Firmware Version-
   QualcommWsa8830 Version-
QualcommWcn7880 Firmware Version-
   QualcommWcn7880 Version-
QualcommWcn6755 Firmware Version-
   QualcommWcn6755 Version-
QualcommWcn6650 Firmware Version-
   QualcommWcn6650 Version-
QualcommWcd9395 Firmware Version-
   QualcommWcd9395 Version-
QualcommWcd9390 Firmware Version-
   QualcommWcd9390 Version-
QualcommWcd9385 Firmware Version-
   QualcommWcd9385 Version-
QualcommWcd9380 Firmware Version-
   QualcommWcd9380 Version-
QualcommWcd9378 Firmware Version-
   QualcommWcd9378 Version-
QualcommWcd9375 Firmware Version-
   QualcommWcd9375 Version-
QualcommWcd9371 Firmware Version-
   QualcommWcd9371 Version-
QualcommWcd9370 Firmware Version-
   QualcommWcd9370 Version-
QualcommSm8550p Firmware Version-
   QualcommSm8550p Version-
QualcommSm7550 Firmware Version-
   QualcommSm7550 Version-
QualcommSm7525 Firmware Version-
   QualcommSm7525 Version-
QualcommSg8275p Firmware Version-
   QualcommSg8275p Version-
QualcommSg8275 Firmware Version-
   QualcommSg8275 Version-
QualcommQcs8550 Firmware Version-
   QualcommQcs8550 Version-
QualcommQcm8550 Firmware Version-
   QualcommQcm8550 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.057
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.