CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2024-33039
Medium (6.7) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-11-01)
- CWE
- CWE-822
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:qam8255p_firmware
- qualcomm:qam8650p_firmware
- qualcomm:qam8775p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:sa7255p_firmware
- qualcomm:sa7775p_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8620p_firmware
- qualcomm:sa8650p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa8775p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware
- qualcomm:srv1h_firmware
- qualcomm:srv1m_firmware
- qualcomm:sw5100_firmware
- qualcomm:sw5100p_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wcn3988_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8835_firmware