Medium severity6.1NVD Advisory· Published Dec 2, 2024· Updated Jun 17, 2026

CVE-2024-33037

Description

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Affected products

Qualcomm, Inc./Snapdragonv5
Range: C-V2X 9150
Qualcomm/NPU firmwarellm-create
Qualcomm/NPU driverllm-fuzzy

Patches

Vulnerability mechanics

References

docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.htmlnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000