Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-33036 EUVD-2024-30781GHSA-q9c7-f5ph-hcwx

Use of Out-of-range Pointer Offset in Camera Driver

Published Dec 2, 2024 · Updated Dec 3, 2024 · Assigned by qualcomm

Description

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon C-V2X 9150, FastConnect 6800, FastConnect 6900, FastConnect 7800, QAM8295P, QCA6391, QCA6426, QCA6436, QCA6574AU, QCA6696, QCA8337, QCN9074, QCS410, QCS610, QSM8250, Qualcomm Video Collaboration VC1 Platform, Qualcomm Video Collaboration VC3 Platform, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA… —

References