CVE-2024-33030
MEDIUMCVSS 6.7/10EPSS 0.10%
Last modified
CVE-2024-33030 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Wsa8835 Firmware | All versions |
| Qualcomm | Wsa8830 Firmware | All versions |
| Qualcomm | Wcd9380 Firmware | All versions |
| Qualcomm | Wcd9340 Firmware | All versions |
| Qualcomm | Snapdragon X75 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon X72 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon Auto 5g Modem-Rf Gen 2 Firmware | All versions |
| Qualcomm | Snapdragon 8 Gen 1 Mobile Platform Firmware | All versions |
| Qualcomm | Qfw7124 Firmware | All versions |
| Qualcomm | Qfw7114 Firmware | All versions |
| Qualcomm | Qcn6274 Firmware | All versions |
| Qualcomm | Qcn6224 Firmware | All versions |
| Qualcomm | Qcc710 Firmware | All versions |
| Qualcomm | Qca9377 Firmware | All versions |
| Qualcomm | Qca9367 Firmware | All versions |
| Qualcomm | Qca8337 Firmware | All versions |
| Qualcomm | Qca8081 Firmware | All versions |
| Qualcomm | Qca6698aq Firmware | All versions |
| Qualcomm | Qca6584au Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-33030?
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
How severe is CVE-2024-33030?
CVE-2024-33030 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 0.10% probability of exploitation in the next 30 days.
How do I fix CVE-2024-33030?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-33025Transient DOS while parsing the BSS parameter change count o…7.5
- CVE-2024-33026Transient DOS while parsing probe response and assoc respons…7.5
- CVE-2024-33027Memory corruption can occur when arbitrary user-space app ga…7.8
- CVE-2024-33028Memory corruption as fence object may still be accessed in t…7.8
- CVE-2024-33029Memory corruption while handling the PDR in driver for getti…6.7
- CVE-2024-3303An issue was discovered in GitLab EE affecting all versions …5.7
- CVE-2024-33031Memory corruption while processing the update SIM PB records…6.7
- CVE-2024-33032Memory corruption when the user application modifies the sam…6.7
- CVE-2024-33033Memory corruption while processing IOCTL calls to unmap the …7.8
- CVE-2024-33034Memory corruption can occur if VBOs hold outdated or invalid…7.8
- CVE-2024-33035Memory corruption while calculating total metadata size when…8.4
- CVE-2024-33036Memory corruption while parsing sensor packets in camera dri…6.7
Are you affected by CVE-2024-33030?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST