6.1
Medium
CVE-2024-33037 Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC…
Description
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| c-v2x_9150_firmware | Versions not published | |
| fastconnect_6800_firmware | Versions not published | |
| fastconnect_6900_firmware | Versions not published | |
| qam8295p_firmware | Versions not published | |
| qca6174a_firmware | Versions not published | |
| qca6391_firmware | Versions not published | |
| qca6426_firmware | Versions not published | |
| qca6436_firmware | Versions not published |
Show the 40 other branches Hide the 40 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| qca6574au_firmware | Versions not published | |
| qca6696_firmware | Versions not published | |
| qca8337_firmware | Versions not published | |
| qcn9074_firmware | Versions not published | |
| qcs410_firmware | Versions not published | |
| qcs610_firmware | Versions not published | |
| qsm8250_firmware | Versions not published | |
| qualcomm_video_collaboration_vc1_platform_firmware | Versions not published | |
| qualcomm_video_collaboration_vc3_platform_firmware | Versions not published | |
| sa6145p_firmware | Versions not published | |
| sa6150p_firmware | Versions not published | |
| sa6155p_firmware | Versions not published | |
| sa8145p_firmware | Versions not published | |
| sa8150p_firmware | Versions not published | |
| sa8155p_firmware | Versions not published | |
| sa8195p_firmware | Versions not published | |
| sa8295p_firmware | Versions not published | |
| sa8530p_firmware | Versions not published | |
| sa8540p_firmware | Versions not published | |
| sa9000p_firmware | Versions not published | |
| sd865_5g_firmware | Versions not published | |
| sdx55_firmware | Versions not published | |
| snapdragon_865_5g_mobile_platform_firmware | Versions not published | |
| snapdragon_x55_5g_modem-rf_system_firmware | Versions not published | |
| snapdragon_xr2_5g_platform_firmware | Versions not published | |
| sw5100_firmware | Versions not published | |
| sw5100p_firmware | Versions not published | |
| sxr2130_firmware | Versions not published | |
| wcd9341_firmware | Versions not published | |
| wcd9370_firmware | Versions not published | |
| wcd9380_firmware | Versions not published | |
| wcn3660b_firmware | Versions not published | |
| wcn3680b_firmware | Versions not published | |
| wcn3950_firmware | Versions not published | |
| wcn3980_firmware | Versions not published | |
| wcn3988_firmware | Versions not published | |
| wsa8810_firmware | Versions not published | |
| wsa8815_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8835_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High