CVE-2024-33028: Use After Free in Automotive Telematics
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33028?
CVE-2024-33028 has been classified with a high severity rating due to potential memory corruption risks.
What products are affected by CVE-2024-33028?
CVE-2024-33028 affects various Qualcomm devices and firmware, including Android and several Qualcomm chipsets.
How do I fix CVE-2024-33028?
To fix CVE-2024-33028, you should apply the latest security patches provided by your device or firmware manufacturer.
What are the potential impacts of CVE-2024-33028?
The potential impacts of CVE-2024-33028 include system crashes and exploitation of memory corruption vulnerabilities.
Is there a workaround for CVE-2024-33028?
Implementing temporary measures like minimizing exposure and limiting device usage may mitigate risks while awaiting a patch for CVE-2024-33028.