CVE-2024-33036: Use of Out-of-range Pointer Offset in Camera Driver

Description

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 1% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SN

Snapdragon · Qualcomm, Inc.

C-V2X 9150; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6391; +34 more · source: vendor

C9

C-v2x 9150 Firmware · Qualcomm

0 · source: NVD, CISA

F6

Fastconnect 6800 Firmware · Qualcomm

0 · source: NVD, CISA

F6

Fastconnect 6900 Firmware · Qualcomm

0 · source: NVD, CISA

F7

Fastconnect 7800 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qam8295p Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qca6391 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qca6426 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qca6436 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qca6574au Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qca6696 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qca8337 Firmware · Qualcomm

0 · source: NVD, CISA