CVE-2024-33035
8.4 highEPSS 0.1%
High (8.4) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
Severity
CVSS 3.1
8.4 highCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6200_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6800_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qam8255p_firmware
- qualcomm:qam8620p_firmware
- qualcomm:qam8650p_firmware
- qualcomm:qam8775p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qcm4490_firmware
- qualcomm:qcs4490_firmware
- qualcomm:qcs6490_firmware
- qualcomm:sa4150p_firmware
- qualcomm:sa4155p_firmware
- qualcomm:sa6145p_firmware
- qualcomm:sa6150p_firmware
- qualcomm:sa6155_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa7255p_firmware
- qualcomm:sa7775p_firmware
- qualcomm:sa8145p_firmware
- qualcomm:sa8150p_firmware
- qualcomm:sa8155_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sa8195p_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8530p_firmware
- qualcomm:sa8540p_firmware
- qualcomm:sa8620p_firmware
- qualcomm:sa8650p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa8775p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:sd865_5g_firmware
- qualcomm:sd_8_gen1_5g_firmware
- qualcomm:sm4125_firmware
- qualcomm:sm6370_firmware
- qualcomm:snapdragon_460_mobile_platform_firmware
- qualcomm:snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware
- qualcomm:snapdragon_480_5g_mobile_platform_firmware
References
Check your stackJSON