CVE-2024-33058CWE-1220

Insufficient Granularity of Access Control in Core

High · published April 7, 2025

CVSS v3.1

7.5

EPSS

0%

Percentile

0.6

In the wild

Unconfirmed

What it is

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00094 · 0.6th percentile
Weakness: CWE-1220 · Insufficient Granularity of Access Control
Published: 2025-04-07T10:15Z

EPSS history

Timeline

07 APR 10:15Z
Insufficient Granularity of Access Control in Core
cvelistv5