CVE-2024-33039: Qualcomm QAM8255P Firmware

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Affected products

• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8650P Firmware: affected versions not specified
• Qualcomm QAM8775P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm SA7255P Firmware: affected versions not specified
• Qualcomm SA7775P Firmware: affected versions not specified
• Qualcomm SA8255P Firmware: affected versions not specified
• Qualcomm SA8620P Firmware: affected versions not specified
• Qualcomm SA8650P Firmware: affected versions not specified
• Qualcomm SA8770P Firmware: affected versions not specified
• Qualcomm SA8775P Firmware: affected versions not specified
• Qualcomm SA9000P Firmware: affected versions not specified
• Qualcomm Snapdragon w5+ Gen 1 Wearable Platform Firmware: affected versions not specified
• Qualcomm SRV1H Firmware: affected versions not specified
• Qualcomm SRV1M Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3988 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified

Published 2024-12-02. Last modified 2026-06-17.