Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-33037 EUVD-2024-30782GHSA-m57g-7h85-rchp

Buffer Over-read in Neural Processing Unit

Published Dec 2, 2024 · Updated Dec 2, 2024 · Assigned by qualcomm

Description

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon C-V2X 9150, FastConnect 6800, FastConnect 6900, QAM8295P, QCA6174A, QCA6391, QCA6426, QCA6436, QCA6574AU, QCA6696, QCA8337, QCN9074, QCS410, QCS610, QSM8250, Qualcomm Video Collaboration VC1 Platform, Qualcomm Video Collaboration VC3 Platform, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155P, S… —

References