Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-33039 EUVD-2024-30784GHSA-gf75-g3w3-83w4

Untrusted Pointer Dereference in Audio

Published Dec 2, 2024 · Updated Dec 3, 2024 · Assigned by qualcomm

Description

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QAM8255P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, SA7255P, SA7775P, SA8255P, SA8620P, SA8650P, SA8770P, SA8775P, SA9000P, Snapdragon W5+ Gen 1 Wearable Platform, SRV1H, SRV1M, SW5100, SW5100P, WCN3980, WCN3988, WSA8830, WSA8835 —

References