Strix
26.1K

CVE-2024-33016

MEDIUMCVSS 6.8/10EPSS 0.15%

Last modified

CVE-2024-33016 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. memory corruption when an invalid firehose patch command is invoked.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.

Description

memory corruption when an invalid firehose patch command is invoked.

Metrics

CVSS 3.1
6.8/10

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.15%

4.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
QualcommQcn9000 FirmwareAll versions
QualcommQcn9011 FirmwareAll versions
QualcommQcn9012 FirmwareAll versions
QualcommQcn9013 FirmwareAll versions
QualcommQcn9022 FirmwareAll versions
QualcommQcn9024 FirmwareAll versions
QualcommQcn9070 FirmwareAll versions
QualcommQcn9072 FirmwareAll versions
QualcommQcn9074 FirmwareAll versions
QualcommQcn9160 FirmwareAll versions
QualcommQcn9274 FirmwareAll versions
QualcommQcs2290 FirmwareAll versions
QualcommQcs410 FirmwareAll versions
QualcommQcs4290 FirmwareAll versions
QualcommQcs4490 FirmwareAll versions
QualcommQcs5430 FirmwareAll versions
QualcommQcs610 FirmwareAll versions
QualcommQcs6125 FirmwareAll versions
QualcommQcs6490 FirmwareAll versions
QualcommQcs7230 FirmwareAll versions
QualcommQcs8155 FirmwareAll versions
QualcommSnapdragon 855 Mobile Platform FirmwareAll versions
QualcommSnapdragon 855\+\/860 Mobile Platform \(Sm8150-Ac\) FirmwareAll versions
QualcommSnapdragon 865 5g Mobile Platform FirmwareAll versions
QualcommSnapdragon 865\+ 5g Mobile Platform \(Sm8250-Ab\) FirmwareAll versions
QualcommSnapdragon 870 5g Mobile Platform \(Sm8250-Ac\) FirmwareAll versions
QualcommSnapdragon 888 5g Mobile Platform FirmwareAll versions
QualcommSnapdragon 888\+ 5g Mobile Platform \(Sm8350-Ac\) FirmwareAll versions
QualcommSnapdragon 8c Compute Platform \(Sc8180x-Ad\) FirmwareAll versions
QualcommSnapdragon 8c Compute Platform \(Sc8180xp-Ad\) FirmwareAll versions
QualcommSnapdragon 8cx Compute Platform \(Sc8180x-Aa\) FirmwareAll versions
QualcommSnapdragon 8cx Compute Platform \(Sc8180x-Ab\) FirmwareAll versions
QualcommSnapdragon 8cx Compute Platform \(Sc8180xp-Ac\) FirmwareAll versions
QualcommQcn7606 FirmwareAll versions
QualcommQcn6432 FirmwareAll versions
QualcommQcn6422 FirmwareAll versions
QualcommQcn6412 FirmwareAll versions
QualcommQcn6402 FirmwareAll versions
QualcommQcn6274 FirmwareAll versions
QualcommQcn6224 FirmwareAll versions
QualcommQcn6024 FirmwareAll versions
QualcommQcn6023 FirmwareAll versions
QualcommQcn5152 FirmwareAll versions
QualcommQcn5124 FirmwareAll versions
QualcommQcn5122 FirmwareAll versions
QualcommQcn5121 FirmwareAll versions
QualcommQcn5052 FirmwareAll versions
QualcommQcn5022 FirmwareAll versions
QualcommQcn5021 FirmwareAll versions
QualcommQcm8550 FirmwareAll versions

Showing 50 of 333 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-33016?
memory corruption when an invalid firehose patch command is invoked.
How severe is CVE-2024-33016?
CVE-2024-33016 has a CVSS score of 6.8/10 (MEDIUM severity). The EPSS model estimates a 0.15% probability of exploitation in the next 30 days.
How do I fix CVE-2024-33016?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-33016?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST