CVE-2024-33030

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

State: Published
Severity: 6.7 Medium
Published: Nov 4, 2024
Updated: Nov 8, 2024
Reserved: Apr 23, 2024

Description

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

Scores

CVSS	Score	Vector	Source
3.1	6.7 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6900Affected FastConnect 7800Affected QCA6584AUAffected QCA6698AQAffected QCA8081Affected QCA8337Affected QCA9367Affected QCA9377Affected QCC710Affected QCN6224Affected QCN6274Affected QFW7114Affected QFW7124Affected Snapdragon 8 Gen 1 Mobile PlatformAffected Snapdragon Auto 5G Modem-RF Gen 2Affected Snapdragon X72 5G Modem-RF SystemAffected Snapdragon X75 5G Modem-RF SystemAffected WCD9340Affected WCD9380Affected WSA8830Affected WSA8835Affected

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCA6584AUAffected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
QCA9367Affected
QCA9377Affected
QCC710Affected
QCN6224Affected
QCN6274Affected
QFW7114Affected
QFW7124Affected
Snapdragon 8 Gen 1 Mobile PlatformAffected
Snapdragon Auto 5G Modem-RF Gen 2Affected
Snapdragon X72 5G Modem-RF SystemAffected
Snapdragon X75 5G Modem-RF SystemAffected
WCD9340Affected
WCD9380Affected
WSA8830Affected
WSA8835Affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.