Description
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
Reserved 2024-04-23 | Published 2024-09-02 | Updated 2024-09-05 | Assigner
qualcommHIGH: 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem types
CWE-190 Integer Overflow or Wraparound
Product status
Default status
unaffected
FastConnect 6200
affected
FastConnect 6700
affected
FastConnect 6800
affected
FastConnect 6900
affected
FastConnect 7800
affected
QAM8255P
affected
QAM8620P
affected
QAM8650P
affected
QAM8775P
affected
QAMSRV1H
affected
QAMSRV1M
affected
QCA6391
affected
QCA6426
affected
QCA6436
affected
QCA6574
affected
QCA6574A
affected
QCA6574AU
affected
QCA6595AU
affected
QCA6696
affected
QCM4490
affected
QCS4490
affected
QCS6490
affected
Qualcomm Video Collaboration VC3 Platform
affected
SA4150P
affected
SA4155P
affected
SA6145P
affected
SA6150P
affected
SA6155
affected
SA6155P
affected
SA7255P
affected
SA7775P
affected
SA8145P
affected
SA8150P
affected
SA8155
affected
SA8155P
affected
SA8195P
affected
SA8255P
affected
SA8530P
affected
SA8540P
affected
SA8620P
affected
SA8650P
affected
SA8770P
affected
SA8775P
affected
SA9000P
affected
SD 8 Gen1 5G
affected
SD865 5G
affected
SM4125
affected
SM6370
affected
Snapdragon 4 Gen 1 Mobile Platform
affected
Snapdragon 4 Gen 2 Mobile Platform
affected
Snapdragon 460 Mobile Platform
affected
Snapdragon 480 5G Mobile Platform
affected
Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
affected
Snapdragon 662 Mobile Platform
affected
Snapdragon 680 4G Mobile Platform
affected
Snapdragon 685 4G Mobile Platform (SM6225-AD)
affected
Snapdragon 695 5G Mobile Platform
affected
Snapdragon 8 Gen 1 Mobile Platform
affected
Snapdragon 8+ Gen 1 Mobile Platform
affected
Snapdragon 865 5G Mobile Platform
affected
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
affected
Snapdragon 870 5G Mobile Platform (SM8250-AC)
affected
Snapdragon W5+ Gen 1 Wearable Platform
affected
Snapdragon X55 5G Modem-RF System
affected
Snapdragon XR2 5G Platform
affected
SRV1H
affected
SRV1L
affected
SRV1M
affected
SSG2115P
affected
SSG2125P
affected
SW5100
affected
SW5100P
affected
SXR1230P
affected
SXR2130
affected
TalynPlus
affected
WCD9326
affected
WCD9335
affected
WCD9370
affected
WCD9375
affected
WCD9380
affected
WCD9385
affected
WCN3910
affected
WCN3950
affected
WCN3980
affected
WCN3988
affected
WSA8810
affected
WSA8815
affected
WSA8830
affected
WSA8832
affected
WSA8835
affected
References
docs.qualcomm.com/...tybulletin/september-2024-bulletin.html
cve.org (CVE-2024-33035)
nvd.nist.gov (CVE-2024-33035)
Download JSON
Subscribe to our newsletter to learn more about our work.
