CVE-2024-33040

{"id": "CVE-2024-33040", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2024-12-02T11:15:08.070", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html", "source": "product-security@qualcomm.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access."}, {"lang": "es", "value": " Puede ocurrir corrupci\u00f3n de memoria al invocar el comando de liberaci\u00f3n redundante para liberar un b\u00fafer del espacio del usuario como condici\u00f3n de ejecuci\u00f3n en el espacio del n\u00facleo entre la liberaci\u00f3n del b\u00fafer y el acceso al b\u00fafer."}], "lastModified": "2024-12-02T11:15:08.070", "sourceIdentifier": "product-security@qualcomm.com"}