High severity · published Aug 5, 2024
CVE-2024-33034
Use After Free in Graphics Linux
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Snapdragon · Qualcomm, Inc.
FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8255P; +34 more · source: vendor
F6
Fastconnect 6200 Firmware · Qualcomm
0 · source: NVD, CISA
F6
Fastconnect 6700 Firmware · Qualcomm
0 · source: NVD, CISA
F6
Fastconnect 6900 Firmware · Qualcomm
0 · source: NVD, CISA
F7
Fastconnect 7800 Firmware · Qualcomm
0 · source: NVD, CISA
FR
Flight Rb5 5g Platform Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qam8255p Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qam8295p Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qam8620p Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qam8650p Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qam8775p Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qamsrv1h Firmware · Qualcomm
0 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-33034
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-33034
Patch
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
More from Snapdragon
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2024-43047
Use After Free in DSP Service
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux