CVE-2024-33034 — Use After Free in INC Snapdragon

CWE-416 — Use After Free3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 64.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm INC SnapdragonGoogle Android
Timeline
PublishedAug 5
Latest updateSep 1

Description

Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5qualcomm_inc/snapdragon105 versions+104

Patches

Patch: docs.qualcomm.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-v7wj-7f24-qm89: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are perfo↗2024-08-05
▶

📋Vendor Advisories

1
Android
CVE-2024-33034: Display↗2024-09-01
▶