CVE-2024-33043: Buffer Over-read in FM Host
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/fm-commonsysto a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33043?
CVE-2024-33043 is classified as a transient denial of service (DoS) vulnerability.
How do I fix CVE-2024-33043?
To fix CVE-2024-33043, ensure that you update your affected Qualcomm firmware to the latest version provided by the vendor.
What software is affected by CVE-2024-33043?
CVE-2024-33043 affects various Qualcomm firmware on devices such as Android smartphones and other hardware platforms.
What are the potential impacts of CVE-2024-33043?
CVE-2024-33043 can lead to a transient denial of service during the handling of a Program Service event.
Is there a patch available for CVE-2024-33043?
Yes, patches for CVE-2024-33043 are available through firmware updates for affected Qualcomm devices.