CVE-2024-33039: Untrusted Pointer Dereference in Audio
Published Dec 2, 2024
·Updated
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
Affected Software
44 affected components
All of the following
QUALCOMM Qam8255p Firmware
QUALCOMM Qam8255p
All of the following
QUALCOMM Qam8650p Firmware
QUALCOMM Qam8650p
All of the following
QUALCOMM Qam8775p Firmware
QUALCOMM Qam8775p
All of the following
QUALCOMM Qamsrv1h Firmware
QUALCOMM Qamsrv1h
All of the following
QUALCOMM Qamsrv1m Firmware
QUALCOMM Qamsrv1m
All of the following
QUALCOMM Sa7255p Firmware
QUALCOMM Sa7255p
All of the following
QUALCOMM Sa7775p Firmware
QUALCOMM Sa7775p
All of the following
QUALCOMM Sa8255p Firmware
QUALCOMM Sa8255p
All of the following
QUALCOMM Sa8620p Firmware
QUALCOMM Sa8620p
All of the following
QUALCOMM Sa8650p Firmware
QUALCOMM Sa8650p
All of the following
QUALCOMM Sa8770p Firmware
QUALCOMM Sa8770p
All of the following
QUALCOMM Sa8775p Firmware
QUALCOMM Sa8775p
All of the following
QUALCOMM Sa9000p Firmware
QUALCOMM Sa9000p
All of the following
QUALCOMM Snapdragon W5\+ Gen 1 Wearable Platform Firmware
QUALCOMM Snapdragon W5\+ Gen 1 Wearable Platform
All of the following
QUALCOMM Srv1h Firmware
QUALCOMM Srv1h
All of the following
QUALCOMM Srv1m Firmware
QUALCOMM Srv1m
All of the following
QUALCOMM Sw5100 Firmware
QUALCOMM Sw5100
All of the following
QUALCOMM Sw5100p Firmware
QUALCOMM Sw5100p
All of the following
QUALCOMM Wcn3980 Firmware
QUALCOMM Wcn3980
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Remediation
Event History
Dec 2, 2024
CVE Published
via MITRE·10:18 AM
Data Sourced
via MITRE·10:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-33039?
CVE-2024-33039 has a high severity due to the potential for memory corruption vulnerabilities.
2
How do I fix CVE-2024-33039?
To fix CVE-2024-33039, ensure that your firmware is updated to the latest version provided by Qualcomm.
3
What software is affected by CVE-2024-33039?
CVE-2024-33039 affects multiple Qualcomm firmware products, including QAM8255P, QAM8650P, and QAM8775P.
4
Can CVE-2024-33039 be exploited remotely?
Yes, CVE-2024-33039 can potentially be exploited remotely if an attacker manipulates the PAL service API.
5
What should I do if I am using affected Qualcomm devices related to CVE-2024-33039?
If using affected Qualcomm devices, it is recommended to monitor for firmware updates and apply them as soon as possible.