VULNERABILITY INTELLIGENCE

CVE-2024-33040

CVSS score6.7 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2024-12-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.

Weakness classification

  • product-security@qualcomm.com: CWE-416

Primary references