Back to Database
Status published
High
CVE-2024-33038
Untrusted Pointer Dereference in Computer Vision
Vulnerability Description
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-33038
Credits & Attribution
No credits recorded in the NVD database.
References
More from Qualcomm, Inc.
View All →CVE-2025-59617
Use After Free in Computer Vision
Medium
6.6
CVE-2025-59616
Use After Free in Computer Vision
Medium
6.6
CVE-2025-59615
Use After Free in Computer Vision
Medium
6.6
CVE-2025-59614
Out-of-bounds Write in Windows Compute
Medium
6.7
CVE-2025-59613
Stack-based Buffer Overflow in Windows Compute
Medium
6.7
Affected Vendor
Qualcomm, Inc.
View all reports →Affected Software
Snapdragon
Vulnerable Versions:
FastConnect 6700, FastConnect 6900, FastConnect 7800, QCM4490, QCM5430, QCM6490, QCM8550, QCS4490, QCS5430, QCS6490, QCS8550, Qualcomm Video Collaboration VC3 Platform, SD 8 Gen1 5G, SG8275P, SM8550P, SM8635, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon 8+ Gen 2 Mobile Platform, Snapdragon AR2 Gen 1 Platform, SSG2115P, SSG2125P, SXR1230P, TalynPlus, WCD9370, WCD9375, WCD9380, WCD9385, WCD9390, WCD9395, WCN3950, WCN3988, WCN6740, WCN6755, WSA8810, WSA8815, WSA8830, WSA8832, WSA8835, WSA8840, WSA8845, WSA8845H
Timeline
Official Publish:
September 2nd, 2024
Last Modified:
September 5th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H