CVE-2024-33040
MEDIUMDescription
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
Is your site exposed to CVE-2024-33040?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | fastconnect_6800_firmware |
| qualcomm | fastconnect_6800 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | qam8255p_firmware |
| qualcomm | qam8255p |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6426_firmware |
| qualcomm | qca6426 |
| qualcomm | qca6436_firmware |
| qualcomm | qca6436 |
| qualcomm | qca6595au_firmware |
| qualcomm | qca6595au |
| qualcomm | qca6678aq_firmware |
| qualcomm | qca6678aq |
| qualcomm | sa8255p_firmware |
| qualcomm | sa8255p |
| qualcomm | sd865_5g_firmware |
| qualcomm | sd865_5g |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_8_gen_1_mobile_platform |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware |
| qualcomm | snapdragon_865_5g_mobile_platform |
| qualcomm | snapdragon_865\+_5g_mobile_platform_firmware |
| qualcomm | snapdragon_865\+_5g_mobile_platform |
| qualcomm | snapdragon_870_5g_mobile_platform_firmware |
| qualcomm | snapdragon_870_5g_mobile_platform |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x55_5g_modem-rf_system |
| qualcomm | snapdragon_xr2_5g_platform_firmware |
| qualcomm | snapdragon_xr2_5g_platform |
| qualcomm | sw5100_firmware |
| qualcomm | sw5100 |
| qualcomm | sw5100p_firmware |
| qualcomm | sw5100p |
| qualcomm | sxr2130_firmware |
| qualcomm | sxr2130 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcn3660b_firmware |
| qualcomm | wcn3660b |
| qualcomm | wcn3680b_firmware |
| qualcomm | wcn3680b |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
References
Frequently Asked Questions
What is CVE-2024-33040? +
How severe is CVE-2024-33040? +
What products are affected by CVE-2024-33040? +
How do I check if I'm vulnerable to CVE-2024-33040? +
Related Vulnerabilities
Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the …
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …
rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice …
XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder …
c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue …
There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an …