MEDIUM · 6.7

CVE-2024-33030

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

Vulnerability Description

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommWsa8835 Firmware-
QualcommWsa8835-
QualcommWsa8830 Firmware-
QualcommWsa8830-
QualcommWcd9380 Firmware-
QualcommWcd9380-
QualcommWcd9340 Firmware-
QualcommWcd9340-
QualcommSnapdragon X75 5G Modem-Rf System Firmware-
QualcommSnapdragon X75 5G Modem-Rf System-
QualcommSnapdragon X72 5G Modem-Rf System Firmware-
QualcommSnapdragon X72 5G Modem-Rf System-
QualcommSnapdragon Auto 5G Modem-Rf Gen 2 Firmware-
QualcommSnapdragon Auto 5G Modem-Rf Gen 2-
QualcommSnapdragon 8 Gen 1 Mobile Platform Firmware-
QualcommSnapdragon 8 Gen 1 Mobile Platform-
QualcommQfw7124 Firmware-
QualcommQfw7124-
QualcommQfw7114 Firmware-
QualcommQfw7114-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-33030?

CVE-2024-33030 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

How severe is CVE-2024-33030?

CVE-2024-33030 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-33030?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Wsa8835 Firmware, Qualcomm Wsa8835, Qualcomm Wsa8830 Firmware, Qualcomm Wsa8830, Qualcomm Wcd9380 Firmware.