CVE-2024-33034: Use After Free in Graphics Linux

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-05 · updated 2026-06-17
Weakness: CWE-416

Description

Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

Affected products

Qualcomm Fastconnect 6200 Firmware: all versions
Qualcomm Fastconnect 6700 Firmware: all versions
Qualcomm Fastconnect 6900 Firmware: all versions
Qualcomm Fastconnect 7800 Firmware: all versions
Qualcomm Flight Rb5 5G Platform Firmware: all versions
Qualcomm Qam8255P Firmware: all versions
Qualcomm Qam8295P Firmware: all versions
Qualcomm Qam8620P Firmware: all versions
Qualcomm Qam8650P Firmware: all versions
Qualcomm Qam8775P Firmware: all versions
Qualcomm Qamsrv1H Firmware: all versions
Qualcomm Qamsrv1M Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6595 Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6678Aq Firmware: all versions
Qualcomm Qca6688Aq Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca6698Aq Firmware: all versions
Qualcomm Qca6797Aq Firmware: all versions
Qualcomm Qcm4325 Firmware: all versions
Qualcomm Qcm4490 Firmware: all versions
Qualcomm Qcm5430 Firmware: all versions
Qualcomm Qcm6125 Firmware: all versions
Qualcomm Qcm6490 Firmware: all versions
Qualcomm Qcm8550 Firmware: all versions
Qualcomm Qcs4490 Firmware: all versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

Get alerted when CVE-2024-33034 or the next vulnerability affects your stack