Lucene search

K
vulnrichmentQualcommVULNRICHMENT:CVE-2024-33038
HistorySep 02, 2024 - 10:22 a.m.

CVE-2024-33038 Untrusted Pointer Dereference in Computer Vision

2024-09-0210:22:34
CWE-822
qualcomm
github.com
cve-2024-33038
memory corruption
computer vision
untrusted pointer
dereference
dsp
eva

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "fastconnect_6700_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "fastconnect_6900_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "fastconnect_7800_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcm4490_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcm5430_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcm6490_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcm8550_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcs4490_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcs5430_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcs6490_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcs8550_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qualcomm_video_collaboration_vc3_platform_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sd_8_gen1_5g_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sg8275p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sm8550p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sm8635_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "snapdragon_4_gen_2_mobile_platform_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "snapdragon_8_gen_1_mobile_platform_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "snapdragon_8_gen_2_mobile_platform_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "snapdragon_8_gen_3_mobile_platform_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "snapdragon_ar2_gen_1_platform_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "ssg2115p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "ssg2125p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sxr1230p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:talynplus_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "talynplus_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcd9370_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcd9375_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcd9380_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcd9385_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcd9390_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcd9395_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcn3950_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcn3988_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcn6740_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wcn6755_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8810_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8815_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8830_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8832_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8835_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8840_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8845_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "wsa8845h_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-33038