6.7
Medium
CVE-2024-33039 Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not…
Description
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| qam8255p_firmware | Versions not published | |
| qam8650p_firmware | Versions not published | |
| qam8775p_firmware | Versions not published | |
| qamsrv1h_firmware | Versions not published | |
| qamsrv1m_firmware | Versions not published | |
| sa7255p_firmware | Versions not published | |
| sa7775p_firmware | Versions not published | |
| sa8255p_firmware | Versions not published |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| sa8620p_firmware | Versions not published | |
| sa8650p_firmware | Versions not published | |
| sa8770p_firmware | Versions not published | |
| sa8775p_firmware | Versions not published | |
| sa9000p_firmware | Versions not published | |
| srv1h_firmware | Versions not published | |
| srv1m_firmware | Versions not published | |
| sw5100_firmware | Versions not published | |
| sw5100p_firmware | Versions not published | |
| wcn3980_firmware | Versions not published | |
| wcn3988_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8835_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High