CVE-2024-33044 — HIGH (8.4)

Vulnerability Description

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	315 5G Iot Modem Firmware	-
Qualcomm	315 5G Iot Modem	-
Qualcomm	Aqt1000 Firmware	-
Qualcomm	Aqt1000	-
Qualcomm	Ar8035 Firmware	-
Qualcomm	Ar8035	-
Qualcomm	Csrb31024 Firmware	-
Qualcomm	Csrb31024	-
Qualcomm	Fastconnect 6200 Firmware	-
Qualcomm	Fastconnect 6200	-
Qualcomm	Fastconnect 6700 Firmware	-
Qualcomm	Fastconnect 6700	-
Qualcomm	Fastconnect 6800 Firmware	-
Qualcomm	Fastconnect 6800	-
Qualcomm	Fastconnect 6900 Firmware	-
Qualcomm	Fastconnect 6900	-
Qualcomm	Fastconnect 7800 Firmware	-
Qualcomm	Fastconnect 7800	-
Qualcomm	Flight Rb5 5G Platform Firmware	-
Qualcomm	Flight Rb5 5G Platform	-

Related Weaknesses (CWE)

CWE-129

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024Vendor Advisory

FAQ

What is CVE-2024-33044?

CVE-2024-33044 is a vulnerability with a CVSS score of 8.4 (HIGH). Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

How severe is CVE-2024-33044?

CVE-2024-33044 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-33044?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 315 5G Iot Modem Firmware, Qualcomm 315 5G Iot Modem, Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar8035 Firmware.