CVE-2024-33034: Use After Free in Graphics Linux
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/graphics-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33034?
The severity of CVE-2024-33034 is categorized as high due to potential exploitation leading to memory corruption.
How do I fix CVE-2024-33034?
To fix CVE-2024-33034, ensure that you update to the latest firmware versions provided by the manufacturer.
What software is affected by CVE-2024-33034?
CVE-2024-33034 affects various Qualcomm firmware products including Android devices and multiple Qualcomm chipsets.
What are the potential impacts of CVE-2024-33034?
The potential impacts of CVE-2024-33034 include system crashes and security vulnerabilities due to memory corruption.
When was CVE-2024-33034 disclosed?
CVE-2024-33034 was disclosed in August 2024 as part of security bulletins by Qualcomm and Android.