VulnerabilityAnalyzed
CVE-2024-33066
Memory corruption while redirecting log file to any file location with any file name.
CRITICAL 9.8EPSS 0.60%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.60%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Memory corruption while redirecting log file to any file location with any file name.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- qualcomm/snapdragon x65 5g modem-rf system firmware · qualcomm/sdx65m firmware · qualcomm/sdx55 firmware · qualcomm/qxm8083 firmware · qualcomm/qcn9274 firmware · qualcomm/qcn9160 firmware · qualcomm/qcn9100 firmware · qualcomm/qcn9074 firmware · qualcomm/qcn9072 firmware · qualcomm/qcn9070 firmware · qualcomm/qcn9024 firmware · qualcomm/qcn9022 firmware · qualcomm/qcn9000 firmware · qualcomm/qcn6432 firmware · qualcomm/qcn6422 firmware · qualcomm/qcn6412 firmware · qualcomm/qcn6402 firmware · qualcomm/qcn6132 firmware · qualcomm/qcn6122 firmware · qualcomm/qcn6112 firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.