PT-2024-25074 · Qualcomm · Snapdragon+3

Published 2024-11-04 · Updated 2024-11-07 · CVE-2024-33029

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves memory corruption while handling the PDR in a driver for getting remote heap maps. This is a memory corruption problem that occurs when dealing with the PDR in the driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2024-33029

Affected Products

Snapdragon

Qca6584Au Firmware

Qca6698Aq Firmware

Snapdragon Auto 5G Modem-Rf Gen 2 Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-33029 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html · Vendor Advisory
• https://t.me/cvenotify/100470 · Telegram Post
• https://t.me/cvedetector/9714 · Telegram Post
• https://t.me/cvenotify/100979 · Telegram Post
• https://twitter.com/CVEnew/status/1853381323320373410 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1853453919684284830 · Twitter Post