Skip to main content

205 Mobile Platform Firmware CVE-2024-33043

MEDIUM
Buffer Over-read (CWE-126)
2024-09-02 product-security@qualcomm.com
Buffer Overflow Qualcomm 205 Mobile Platform Firmware 215 Mobile Platform Firmware Apq8017 Firmware Aqt1000 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Msm8996au Firmware Qam8255p Firmware Qam8295p Firmware Qam8775p Firmware Qca6310 Firmware Qca6320 Firmware Qca6335 Firmware Qca6391 Firmware Qca6420 Firmware Qca6421 Firmware Qca6426 Firmware Qca6430 Firmware Qca6431 Firmware Qca6436 Firmware Qca6564 Firmware Qca6564a Firmware Qca6564au Firmware Qca6574 Firmware Qca6574a Firmware Qca6574au Firmware Qca6595 Firmware Qca6595au Firmware Qca6696 Firmware Qca6698aq Firmware Qcm2150 Firmware Qcm2290 Firmware Qcm4290 Firmware Qcm4325 Firmware Qcm4490 Firmware Qcm5430 Firmware Qcm6125 Firmware Qcm6490 Firmware Qcm8550 Firmware Qcs2290 Firmware Qcs410 Firmware Qcs4290 Firmware Qcs4490 Firmware Qcs5430 Firmware Qcs610 Firmware Qcs6125 Firmware Qcs6490 Firmware Qcs7230 Firmware Qcs8250 Firmware Qcs8550 Firmware Robotics Rb3 Platform Firmware Sa4150p Firmware Sa4155p Firmware Sa6145p Firmware Sa6150p Firmware Sa6155 Firmware Sa6155p Firmware Sa8145p Firmware Sa8150p Firmware Sa8155 Firmware Sa8155p Firmware Sa8195p Firmware Sa8255p Firmware Sa8295p Firmware Sa8770p Firmware Sa8775p Firmware Sa9000p Firmware Sd 8 Gen1 5g Firmware Sd626 Firmware Sd660 Firmware Sd670 Firmware Sd730 Firmware Sd835 Firmware Sd855 Firmware Sd865 5g Firmware Sd888 Firmware Sdm429w Firmware Sdx55 Firmware Sg4150p Firmware Sm6250 Firmware Sm7250p Firmware Sm7315 Firmware Sm7325p Firmware Sm7435 Firmware Sm8550p Firmware Sm8635 Firmware Sm8750 Firmware Smart Audio 200 Platform Firmware Smart Display 200 Platform Firmware Snapdragon 210 Processor Firmware Snapdragon 212 Mobile Platform Firmware Snapdragon 4 Gen 1 Mobile Platform Firmware Snapdragon 4 Gen 2 Mobile Platform Firmware Snapdragon 425 Mobile Platform Firmware Snapdragon 429 Mobile Platform Firmware Snapdragon 439 Mobile Platform Firmware Snapdragon 460 Mobile Platform Firmware Snapdragon 480 5g Mobile Platform Firmware Snapdragon 6 Gen 1 Mobile Platform Firmware Snapdragon 625 Mobile Platform Firmware Snapdragon 626 Mobile Platform Firmware Snapdragon 630 Mobile Platform Firmware Snapdragon 632 Mobile Platform Firmware Snapdragon 636 Mobile Platform Firmware Snapdragon 660 Mobile Platform Firmware Snapdragon 662 Mobile Platform Firmware Snapdragon 670 Mobile Platform Firmware Snapdragon 675 Mobile Platform Firmware Snapdragon 680 4g Mobile Platform Firmware Snapdragon 685 4g Mobile Platform Firmware Snapdragon 690 5g Mobile Platform Firmware Snapdragon 695 5g Mobile Platform Firmware Snapdragon 7 Gen 1 Mobile Platform Firmware Snapdragon 710 Mobile Platform Firmware Snapdragon 720g Mobile Platform Firmware Snapdragon 778g 5g Mobile Platform Firmware Snapdragon 780g 5g Mobile Platform Firmware Snapdragon 782g Mobile Platform Firmware Snapdragon 8 Gen 1 Mobile Platform Firmware Snapdragon 8 Gen 2 Mobile Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Snapdragon 820 Automotive Platform Firmware Snapdragon 835 Mobile Pc Platform Firmware Snapdragon 845 Mobile Platform Firmware Snapdragon 855 Mobile Platform Firmware Snapdragon 865 5g Mobile Platform Firmware Snapdragon 870 5g Mobile Platform Firmware Snapdragon 888 5g Mobile Platform Firmware Snapdragon X50 5g Modem Rf System Firmware Snapdragon X55 5g Modem Rf System Firmware Snapdragon Xr1 Platform Firmware Snapdragon Xr2 5g Platform Firmware Sxr1120 Firmware Sxr2130 Firmware Sxr2230p Firmware Sxr2250p Firmware Talynplus Firmware Video Collaboration Vc1 Platform Firmware Video Collaboration Vc3 Platform Firmware Video Collaboration Vc5 Platform Firmware Vision Intelligence 100 Platform Firmware Vision Intelligence 200 Platform Firmware Vision Intelligence 400 Platform Firmware Wcd9326 Firmware Wcd9335 Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcd9390 Firmware Wcd9395 Firmware Wcn3610 Firmware Wcn3615 Firmware Wcn3620 Firmware Wcn3660b Firmware Wcn3680 Firmware Wcn3680b Firmware Wcn3910 Firmware Wcn3950 Firmware Wcn3980 Firmware Wcn3988 Firmware Wcn3990 Firmware Wcn6740 Firmware Wcn6755 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware Snapdragon 7C Gen 3 Compute Firmware Snapdragon 855 Firmware Snapdragon Xr2 Gen 1 Platform Firmware Msm8108 Firmware Msm8209 Firmware Msm8608 Firmware Msm8909W Firmware Snapdragon 208 Processor Firmware Snapdragon Wear 2100 Platform Firmware Snapdragon Wear 2500 Platform Firmware Snapdragon Wear 3100 Platform Firmware Snapdragon 678 Mobile Platform Firmware Snapdragon 730 Mobile Platform Firmware Snapdragon 730G Mobile Platform Firmware Snapdragon 732G Mobile Platform Firmware Snapdragon 765 5G Mobile Platform Firmware Snapdragon 765G 5G Mobile Platform Firmware Snapdragon 768G 5G Mobile Platform Firmware Snapdragon 860 Mobile Platform Firmware Snapdragon 7 Gen 2 Mobile Platform Firmware
5.5
CVSS 3.1 · Vendor: qualcomm
Share

Severity by source

Vendor (qualcomm) PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (qualcomm) · only source for this CVE.

CVSS VectorVendor: qualcomm

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 02, 2024 - 12:15 cve.org
MEDIUM 5.5

DescriptionCVE.org

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

AnalysisAI

Transient DOS while handling PS event when Program Service name length offset value is set to 255. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-126. Transient DOS while handling PS event when Program Service name length offset value is set to 255. Affected products include: Qualcomm Apq8017 Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Fastconnect 6200 Firmware, Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6800 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-53026 HIGH
8.2 Jun 03

CVE-2024-53026 is an information disclosure vulnerability in IMS (IP Multimedia Subsystem) implementations affecting VoL

CVE-2024-53021 HIGH
8.2 Jun 03

CVE-2024-53021 is an information disclosure vulnerability in RTCP (Real-time Transport Control Protocol) packet processi

CVE-2024-53020 HIGH
8.2 Jun 03

CVE-2024-53020 is an information disclosure vulnerability in RTP (Real-time Transport Protocol) packet processing that o

CVE-2024-23359 HIGH
8.2 Sep 02

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. Rated

CVE-2024-43052 HIGH
7.8 Dec 02

Memory corruption while processing API calls to NPU with invalid input. Rated high severity (CVSS 7.8), this vulnerabili

CVE-2024-33056 HIGH
7.8 Dec 02

Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.

CVE-2024-38423 HIGH
7.8 Nov 04

Memory corruption while processing GPU page table switch. Rated high severity (CVSS 7.8), this vulnerability is low atta

CVE-2024-38422 HIGH
7.8 Nov 04

Memory corruption while processing voice packet with arbitrary data received from ADSP. Rated high severity (CVSS 7.8),

CVE-2024-33027 HIGH
7.8 Aug 05

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corruptin

CVE-2024-23373 HIGH
7.8 Jul 01

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. Rated high severity (

CVE-2024-23358 HIGH
7.5 Sep 02

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem. Rated high severit

CVE-2024-23353 HIGH
7.5 Aug 05

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. Rated high severity (CVSS

Share

CVE-2024-33043 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy