Skip to content
Fencer Vulns
high 8.4

CVE-2024-33056 json

Buffer Over-read in MProc

published 2024-12-02 23 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-30801

cvss
8.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 1%
public exploits
0
none known

Summary

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
23 mo ago

Exploit prediction

0.10% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Qualcomm, Inc. Snapdragon
  • qualcomm 315_5g_iot_modem_firmware
  • qualcomm 9205_lte_modem_firmware
  • qualcomm 9206_lte_modem_firmware
  • qualcomm 9207_lte_modem_firmware
  • qualcomm fastconnect_6200_firmware
  • qualcomm fastconnect_6700_firmware
  • qualcomm fastconnect_6800_firmware
  • qualcomm fastconnect_6900_firmware
  • qualcomm fastconnect_7800_firmware
  • qualcomm flight_rb5_5g_platform_firmware
  • qualcomm fsm10055_firmware
  • qualcomm fsm10056_firmware
  • qualcomm home_hub_100_platform_firmware
  • qualcomm immersive_home_214_platform_firmware
  • qualcomm immersive_home_216_platform_firmware
  • qualcomm immersive_home_316_platform_firmware
  • qualcomm immersive_home_318_platform_firmware
  • qualcomm immersive_home_3210_platform_firmware
  • qualcomm immersive_home_326_platform_firmware
  • qualcomm ipq5010_firmware
  • qualcomm ipq5028_firmware
  • qualcomm ipq5300_firmware
  • qualcomm ipq5302_firmware
  • qualcomm ipq5312_firmware
  • qualcomm ipq5332_firmware
  • qualcomm ipq6000_firmware
  • qualcomm ipq6005_firmware
  • qualcomm ipq6010_firmware
  • qualcomm ipq6018_firmware
  • qualcomm ipq6028_firmware
  • qualcomm ipq8064_firmware
  • qualcomm ipq8065_firmware
  • qualcomm ipq8068_firmware
  • qualcomm ipq8070_firmware
  • qualcomm ipq8070a_firmware
  • qualcomm ipq8071_firmware
  • qualcomm ipq8071a_firmware
  • qualcomm ipq8072_firmware
  • qualcomm ipq8072a_firmware
  • qualcomm ipq8074_firmware
  • qualcomm ipq8074a_firmware
  • qualcomm ipq8076_firmware
  • qualcomm ipq8076a_firmware
  • qualcomm ipq8078_firmware
  • qualcomm ipq8078a_firmware
  • qualcomm ipq8173_firmware
  • qualcomm ipq8174_firmware
  • qualcomm ipq9008_firmware
  • qualcomm ipq9554_firmware

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.