CVE-2024-33043
MEDIUMCVSS 5.5/10EPSS 0.09%
Last modified
CVE-2024-33043 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Transient DOS while handling PS event when Program Service name length offset value is set to 255.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Fastconnect 6200 Firmware | All versions |
| Qualcomm | Fastconnect 6700 Firmware | All versions |
| Qualcomm | Fastconnect 6800 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Msm8108 Firmware | All versions |
| Qualcomm | Msm8209 Firmware | All versions |
| Qualcomm | Msm8608 Firmware | All versions |
| Qualcomm | Msm8909w Firmware | All versions |
| Qualcomm | Msm8996au Firmware | All versions |
| Qualcomm | Qam8255p Firmware | All versions |
| Qualcomm | Qam8295p Firmware | All versions |
| Qualcomm | Qam8775p Firmware | All versions |
| Qualcomm | Qca6310 Firmware | All versions |
| Qualcomm | Qca6320 Firmware | All versions |
| Qualcomm | Qca6335 Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qca6420 Firmware | All versions |
| Qualcomm | Qca6421 Firmware | All versions |
| Qualcomm | Qca6426 Firmware | All versions |
| Qualcomm | Qca6430 Firmware | All versions |
| Qualcomm | Qca6431 Firmware | All versions |
| Qualcomm | Qca6436 Firmware | All versions |
| Qualcomm | Qca6564 Firmware | All versions |
| Qualcomm | Qca6564a Firmware | All versions |
| Qualcomm | Qca6564au Firmware | All versions |
| Qualcomm | Qca6574 Firmware | All versions |
| Qualcomm | Qca6574a Firmware | All versions |
| Qualcomm | Qca6574au Firmware | All versions |
| Qualcomm | Qca6595 Firmware | All versions |
| Qualcomm | Qca6595au Firmware | All versions |
| Qualcomm | Qca6696 Firmware | All versions |
| Qualcomm | Qca6698aq Firmware | All versions |
| Qualcomm | Qcm2150 Firmware | All versions |
| Qualcomm | Qcm2290 Firmware | All versions |
| Qualcomm | Qcm4290 Firmware | All versions |
| Qualcomm | Qcm4325 Firmware | All versions |
| Qualcomm | Qcm4490 Firmware | All versions |
| Qualcomm | Qcm5430 Firmware | All versions |
| Qualcomm | Qcm6125 Firmware | All versions |
| Qualcomm | Qcm6490 Firmware | All versions |
| Qualcomm | Qcm8550 Firmware | All versions |
| Qualcomm | Qcs2290 Firmware | All versions |
| Qualcomm | Qcs410 Firmware | All versions |
| Qualcomm | Qcs4290 Firmware | All versions |
| Qualcomm | Qcs4490 Firmware | All versions |
| Qualcomm | Qcs5430 Firmware | All versions |
| Qualcomm | Qcs610 Firmware | All versions |
Showing 50 of 203 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-33043?
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
How severe is CVE-2024-33043?
CVE-2024-33043 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.09% probability of exploitation in the next 30 days.
How do I fix CVE-2024-33043?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-33037Information disclosure as NPU firmware can send invalid IPC …6.1
- CVE-2024-33038Memory corruption while passing untrusted/corrupted pointers…7.8
- CVE-2024-33039Memory corruption when PAL client calls PAL service APIs by …6.7
- CVE-2024-33040Memory corruption while invoking redundant release command t…7
- CVE-2024-33041Memory corruption when input parameter validation for number…7.8
- CVE-2024-33042Memory corruption when Alternative Frequency offset value is…7.8
- CVE-2024-33044Memory corruption while Configuring the SMR/S2CR register in…7.8
- CVE-2024-33045Memory corruption when BTFM client sends new messages over S…7.8
- CVE-2024-33047Memory corruption when the captureRead QDCM command is invok…7.8
- CVE-2024-33048Transient DOS while parsing the received TID-to-link mapping…7.5
- CVE-2024-33049Transient DOS while parsing noninheritance IE of Extension e…7.5
- CVE-2024-3305Authorization Bypass Through User-Controlled Key, Missing Au…7.5
Are you affected by CVE-2024-33043?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
