CVE-2024-33054: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/opensource/eva-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33054?
CVE-2024-33054 has been assigned a severity level that indicates potential exploitation could lead to significant system disruption.
What is the impact of CVE-2024-33054?
The impact of CVE-2024-33054 is related to memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
How do I fix CVE-2024-33054?
To fix CVE-2024-33054, users should apply the latest security updates from Qualcomm and Google.
What software versions are affected by CVE-2024-33054?
CVE-2024-33054 affects multiple Qualcomm fastconnect firmware versions and Google Android software running on affected devices.
Are there any workarounds for CVE-2024-33054?
Currently, there are no known workarounds for CVE-2024-33054 other than applying the provided security updates.