CVE-2024-33039

—

CVSS 3.1

6.7 medium

EPSS

<1%p1

Published

Dec 2, 2024 (Dec 2, 2024)

Modified

Jun 17, 2026

Description

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Vendors: qualcomm
Products: qam8255p firmware, qam8650p firmware, qam8775p firmware, qamsrv1h firmware, qamsrv1m firmware, sa7255p firmware, sa7775p firmware, sa8255p firmware, sa8620p firmware, sa8650p firmware, sa8770p firmware, sa8775p firmware
Weakness: CWE-822
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.