CVE-2024-33035: Integer Overflow or Wraparound in Display

Q: What is the severity of CVE-2024-33035?

CVE-2024-33035 is classified as a high-severity vulnerability due to the potential for memory corruption.

Q: How do I fix CVE-2024-33035?

To fix CVE-2024-33035, users should update their affected Android devices to the latest security patch provided by Google.

Q: What software versions are affected by CVE-2024-33035?

CVE-2024-33035 impacts certain versions of Google Android that utilize the gralloc clients.

Q: What are the potential impacts of CVE-2024-33035?

CVE-2024-33035 could lead to memory corruption, which may cause application crashes or system instability.

Q: Who is affected by CVE-2024-33035?

Users of Google Android devices that use gralloc clients and have them configured with high reserved memory sizes are affected by CVE-2024-33035.

Published Sep 1, 2024

Updated

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

Affected Software

182 affected componentsFixes available

All of the following

Qualcomm Qam8255p Firmware

Qualcomm Qam8255p

All of the following

Qualcomm Qam8620p Firmware

Qualcomm Qam8620p

All of the following

Qualcomm Qam8650p Firmware

Qualcomm Qam8650p

All of the following

Qualcomm Qam8775p Firmware

Qualcomm Qam8775p

All of the following

Qualcomm Qamsrv1h Firmware

Qualcomm Qamsrv1h

All of the following

Qualcomm Qamsrv1m Firmware

Qualcomm Qamsrv1m

All of the following

Qualcomm Qca6391 Firmware

Qualcomm Qca6391

All of the following

Qualcomm Qca6426 Firmware

Qualcomm Qca6426

All of the following

Qualcomm Qca6436 Firmware

Qualcomm Qca6436

All of the following

Qualcomm Qca6574 Firmware

Qualcomm QCA6574

All of the following

Qualcomm Qca6574a Firmware

Qualcomm Qca6574a

All of the following

Qualcomm Qca6574au Firmware

Qualcomm QCA6574AU

All of the following

Qualcomm Qca6595au Firmware

Qualcomm Qca6595au

All of the following

Qualcomm Qca6696 Firmware

Qualcomm Qca6696

All of the following

Qualcomm Qcm4490 Firmware

Qualcomm Qcm4490

All of the following

Qualcomm Qcs4490 Firmware

Qualcomm Qcs4490

All of the following

Qualcomm Qcs6490 Firmware

Qualcomm Qcs6490

All of the following

Qualcomm Video Collaboration Vc3 Platform Firmware

Qualcomm Video Collaboration Vc3 Platform

All of the following

Qualcomm Sa4150p Firmware

Qualcomm Sa4150p

All of the following

Qualcomm Sa4155p Firmware

Qualcomm Sa4155p

All of the following

Qualcomm Sa6145p Firmware

Qualcomm Sa6145p

All of the following

Qualcomm Sa6150p Firmware

Qualcomm Sa6150p

All of the following

Qualcomm Sa6155 Firmware

Qualcomm Sa6155

All of the following

Qualcomm Sa6155p Firmware

Qualcomm Sa6155p

All of the following

Qualcomm Sa7255p Firmware

Qualcomm Sa7255p

All of the following

Qualcomm Sa7775p Firmware

Qualcomm Sa7775p

All of the following

Qualcomm Sa8145p Firmware

Qualcomm Sa8145p

All of the following

Qualcomm Sa8150p Firmware

Qualcomm Sa8150p

All of the following

Qualcomm Sa8155 Firmware

Qualcomm Sa8155

All of the following

Qualcomm Sa8155p Firmware

Qualcomm Sa8155p

All of the following

Qualcomm Sa8195p Firmware

Qualcomm Sa8195p

All of the following

Qualcomm Sa8255p Firmware

Qualcomm Sa8255p

All of the following

Qualcomm Sa8530p Firmware

Qualcomm Sa8530p

All of the following

Qualcomm Sa8540p Firmware

Qualcomm Sa8540p

All of the following

Qualcomm Sa8620p Firmware

Qualcomm Sa8620p

All of the following

Qualcomm Sa8650p Firmware

Qualcomm Sa8650p

All of the following

Qualcomm Sa8770p Firmware

Qualcomm Sa8770p

All of the following

Qualcomm Sa8775p Firmware

Qualcomm Sa8775p

All of the following

Qualcomm Sa9000p Firmware

Qualcomm Sa9000p

All of the following

Qualcomm Sd 8 Gen1 5g Firmware

Qualcomm Sd 8 Gen1 5g

All of the following

Qualcomm Fastconnect 6200 Firmware

Qualcomm Fastconnect 6200

All of the following

Qualcomm Fastconnect 6700 Firmware

Qualcomm Fastconnect 6700

All of the following

Qualcomm Fastconnect 6800 Firmware

Qualcomm Fastconnect 6800

All of the following

Qualcomm Fastconnect 6900 Firmware

Qualcomm Fastconnect 6900

All of the following

Qualcomm Fastconnect 7800 Firmware

Qualcomm Fastconnect 7800

All of the following

Qualcomm Sd865 5g Firmware

Qualcomm Sd865 5g

All of the following

Qualcomm Sm4125 Firmware

Qualcomm Sm4125

All of the following

Qualcomm Sm6370 Firmware

Qualcomm Sm6370

All of the following

Qualcomm Snapdragon 4 Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 4 Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 4 Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 460 Mobile Platform Firmware

Qualcomm Snapdragon 460 Mobile Platform

All of the following

Qualcomm Snapdragon 480 5g Mobile Platform Firmware

Qualcomm Snapdragon 480 5g Mobile Platform

All of the following

Qualcomm Snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\) Firmware

Qualcomm Snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\)

All of the following

Qualcomm Snapdragon 662 Mobile Platform Firmware

Qualcomm Snapdragon 662 Mobile Platform

All of the following

Qualcomm Snapdragon 680 4g Mobile Platform Firmware

Qualcomm Snapdragon 680 4g Mobile Platform

All of the following

Qualcomm Snapdragon 685 4g Mobile Platform \(sm6225-ad\) Firmware

Qualcomm Snapdragon 685 4g Mobile Platform \(sm6225-ad\)

All of the following

Qualcomm Snapdragon 695 5g Mobile Platform Firmware

Qualcomm Snapdragon 695 5g Mobile Platform

All of the following

Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 8 Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 865 5g Mobile Platform Firmware

Qualcomm Snapdragon 865 5g Mobile Platform

All of the following

Qualcomm Snapdragon 865\+ 5g Mobile Platform \(sm8250-ab\) Firmware

Qualcomm Snapdragon 865\+ 5g Mobile Platform \(sm8250-ab\)

All of the following

Qualcomm Snapdragon 870 5g Mobile Platform \(sm8250-ac\) Firmware

Qualcomm Snapdragon 870 5g Mobile Platform \(sm8250-ac\)

All of the following

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform

All of the following

Qualcomm Snapdragon X55 5g Modem-rf System Firmware

Qualcomm Snapdragon X55 5g Modem-rf System

All of the following

Qualcomm Snapdragon Xr2 5g Platform Firmware

Qualcomm Snapdragon Xr2 5g Platform

All of the following

Qualcomm Srv1h Firmware

Qualcomm Srv1h

All of the following

Qualcomm Srv1l Firmware

Qualcomm Srv1l

All of the following

Qualcomm Srv1m Firmware

Qualcomm Srv1m

All of the following

Qualcomm Ssg2115p Firmware

Qualcomm Ssg2115p

All of the following

Qualcomm Ssg2125p Firmware

Qualcomm Ssg2125p

All of the following

Qualcomm Sw5100 Firmware

Qualcomm Sw5100

All of the following

Qualcomm Sw5100p Firmware

Qualcomm Sw5100p

All of the following

Qualcomm Sxr1230p Firmware

Qualcomm Sxr1230p

All of the following

Qualcomm Sxr2130 Firmware

Qualcomm Sxr2130

All of the following

Qualcomm Talynplus Firmware

Qualcomm Talynplus

All of the following

Qualcomm Wcd9326 Firmware

Qualcomm Wcd9326

All of the following

Qualcomm Wcd9335 Firmware

Qualcomm Wcd9335

All of the following

Qualcomm Wcd9370 Firmware

Qualcomm Wcd9370

All of the following

Qualcomm Wcd9375 Firmware

Qualcomm Wcd9375

All of the following

Qualcomm Wcd9380 Firmware

Qualcomm Wcd9380

All of the following

Qualcomm Wcd9385 Firmware

Qualcomm Wcd9385

All of the following

Qualcomm Wcn3910 Firmware

Qualcomm Wcn3910

All of the following

Qualcomm Wcn3950 Firmware

Qualcomm Wcn3950

All of the following

Qualcomm Wcn3980 Firmware

Qualcomm Wcn3980

All of the following

Qualcomm Wcn3988 Firmware

Qualcomm Wcn3988

All of the following

Qualcomm Wsa8810 Firmware

Qualcomm Wsa8810

All of the following

Qualcomm Wsa8815 Firmware

Qualcomm Wsa8815

All of the following

Qualcomm Wsa8830 Firmware

Qualcomm Wsa8830

All of the following

Qualcomm Wsa8832 Firmware

Qualcomm Wsa8832

All of the following

Qualcomm Wsa8835 Firmware

Qualcomm Wsa8835

Google Android

android/platform/hardware/qcom/display>=SoCVersion:0<SoCVersion:2024-09-05

SoCVersion:2024-09-05

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/platform/hardware/qcom/display to a version that resolves this vulnerability.
Fixed in SoCVersion:2024-09-05

Event History

Sep 1, 2024

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Sep 2, 2024

CVE Published

via MITRE·10:22 AM

Data Sourced

via MITRE·10:22 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Sep 3, 2024

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-33035?

CVE-2024-33035 is classified as a high-severity vulnerability due to the potential for memory corruption.

How do I fix CVE-2024-33035?

To fix CVE-2024-33035, users should update their affected Android devices to the latest security patch provided by Google.

What software versions are affected by CVE-2024-33035?

CVE-2024-33035 impacts certain versions of Google Android that utilize the gralloc clients.

What are the potential impacts of CVE-2024-33035?

CVE-2024-33035 could lead to memory corruption, which may cause application crashes or system instability.

Who is affected by CVE-2024-33035?

Users of Google Android devices that use gralloc clients and have them configured with high reserved memory sizes are affected by CVE-2024-33035.

CVE-2024-33035: Integer Overflow or Wraparound in Display

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2024-33035?

How do I fix CVE-2024-33035?

What software versions are affected by CVE-2024-33035?

What are the potential impacts of CVE-2024-33035?

Who is affected by CVE-2024-33035?

Company

Resources

Contact