CVE-2024-33040: Use After Free in Camera Driver
6.7
CVSS
Description
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
Classification
CVE ID: CVE-2024-33040
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.7
Affected Products
Vendor: Qualcomm, Inc.
Product: Snapdragon
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)