Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-33037

Buffer Over-read in Neural Processing Unit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • C-V2X 9150affected
  • FastConnect 6800affected
  • FastConnect 6900affected
  • QAM8295Paffected
  • QCA6174Aaffected
  • QCA6391affected
  • QCA6426affected
  • QCA6436affected
  • QCA6574AUaffected
  • QCA6696affected
  • QCA8337affected
  • QCN9074affected
  • QCS410affected
  • QCS610affected
  • QSM8250affected
  • Qualcomm Video Collaboration VC1 Platformaffected
  • Qualcomm Video Collaboration VC3 Platformaffected
  • SA6145Paffected
  • SA6150Paffected
  • SA6155Paffected
  • SA8145Paffected
  • SA8150Paffected
  • SA8155Paffected
  • SA8195Paffected
  • SA8295Paffected
  • SA8530Paffected
  • SA8540Paffected
  • SA9000Paffected
  • SD865 5Gaffected
  • SDX55affected
  • Snapdragon 865 5G Mobile Platformaffected
  • Snapdragon 865+ 5G Mobile Platform (SM8250-AB)affected
  • Snapdragon 870 5G Mobile Platform (SM8250-AC)affected
  • Snapdragon W5+ Gen 1 Wearable Platformaffected
  • Snapdragon X55 5G Modem-RF Systemaffected
  • Snapdragon XR2 5G Platformaffected
  • SW5100affected
  • SW5100Paffected
  • SXR2130affected
  • WCD9341affected
  • WCD9370affected
  • WCD9380affected
  • WCN3660Baffected
  • WCN3680Baffected
  • WCN3950affected
  • WCN3980affected
  • WCN3988affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8835affected

References