High severity · published Dec 2, 2024
CVE-2024-33040
Use After Free in Camera Driver
7.0
CVSS
0.1%
EPSS
No
On KEV
Description
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 0% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Snapdragon · Qualcomm, Inc.
FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; QCA6391; QCA6426; +24 more · source: vendor
QF
Qam8255p Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6391 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6426 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6436 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6595au Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6678aq Firmware · Qualcomm
0 · source: NVD, CISA
SF
Sa8255p Firmware · Qualcomm
0 · source: NVD, CISA
S5
Sd865 5g Firmware · Qualcomm
0 · source: NVD, CISA
Affected product
SN
Snapdragon
Qualcomm, Inc.
More from Snapdragon
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2024-43047
Use After Free in DSP Service
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux