Skip to main content

Snapdragon X65 5g Modem Rf System Firmware CVE-2024-33066

CRITICAL
Improper Input Validation (CWE-20)
2024-10-07 product-security@qualcomm.com
Buffer Overflow Snapdragon X65 5g Modem Rf System Firmware Sdx65m Firmware Sdx55 Firmware Qxm8083 Firmware Qcn9274 Firmware Qcn9160 Firmware Qcn9100 Firmware Qcn9074 Firmware Qcn9072 Firmware Qcn9070 Firmware Qcn9024 Firmware Qcn9022 Firmware Qcn9000 Firmware Qcn6432 Firmware Qcn6422 Firmware Qcn6412 Firmware Qcn6402 Firmware Qcn6132 Firmware Qcn6122 Firmware Qcn6112 Firmware Qcn6024 Firmware Qcn6023 Firmware Qcn5164 Firmware Qcn5154 Firmware Qcn5152 Firmware Qcn5124 Firmware Qcn5122 Firmware Qcn5052 Firmware Qcn5024 Firmware Qcn5022 Firmware Qcf8001 Firmware Qcf8000 Firmware Qca9889 Firmware Qca9888 Firmware Qca8386 Firmware Qca8085 Firmware Qca8084 Firmware Qca8082 Firmware Qca8081 Firmware Qca8075 Firmware Qca4024 Firmware Ipq9574 Firmware Ipq9554 Firmware Ipq9008 Firmware Ipq8174 Firmware Ipq8173 Firmware Ipq8078a Firmware Ipq8078 Firmware Ipq8076a Firmware Ipq8076 Firmware Ipq8074a Firmware Ipq8072a Firmware Ipq8071a Firmware Ipq8070a Firmware Ipq6028 Firmware Ipq6018 Firmware Ipq6010 Firmware Ipq6000 Firmware Ipq5332 Firmware Ipq5312 Firmware Ipq5302 Firmware Ipq5300 Firmware Ipq5028 Firmware Ipq5010 Firmware Immersive Home 326 Platform Firmware Immersive Home 3210 Platform Firmware Immersive Home 318 Platform Firmware Immersive Home 316 Platform Firmware Immersive Home 216 Platform Firmware Immersive Home 214 Platform Firmware Csr8811 Firmware
9.8
CVSS 3.1 · Vendor: qualcomm
Share

Severity by source

Vendor (qualcomm) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (qualcomm) · only source for this CVE.

CVSS VectorVendor: qualcomm

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Oct 07, 2024 - 13:15 cve.org
CRITICAL 9.8

DescriptionCVE.org

Memory corruption while redirecting log file to any file location with any file name.

AnalysisAI

Memory corruption while redirecting log file to any file location with any file name. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Memory corruption while redirecting log file to any file location with any file name. Affected products include: Qualcomm Snapdragon X65 5G Modem-Rf System Firmware, Qualcomm Sdx65M Firmware, Qualcomm Sdx55 Firmware, Qualcomm Qxm8083 Firmware, Qualcomm Qcn9274 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Snapdragon X65 5g Modem Rf System Firmware

View all
CVE-2026-21385 HIGH POC
7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo
CVE-2023-33025 CRITICAL
9.8 Jan 02

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Rated critical severity (CVSS 9.8), t
CVE-2023-33083 CRITICAL
9.8 Dec 05

Memory corruption in WLAN Host while processing RRM beacon on the AP. Rated critical severity (CVSS 9.8), this vulnerabi
CVE-2023-33082 CRITICAL
9.8 Dec 05

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. Rated critical seve
CVE-2023-33045 CRITICAL
9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity
CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
CVE-2023-33028 CRITICAL
9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln
CVE-2023-24855 CRITICAL
9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s
CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-33030 CRITICAL
9.3 Jan 02

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no
CVE-2024-38408 CRITICAL
9.1 Nov 04

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. Rated critic
CVE-2023-33054 CRITICAL
9.1 Dec 05

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. Rated critical severity (CVSS 9.

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2024-33066 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy