Information Disclosure Vulnerability in Qualcomm Products

CVE-2024-33061

What is CVE-2024-33061?

This vulnerability arises from improper handling of IOCTL calls, which can expose sensitive information when releasing a trusted VM process or opening a communication channel without proper initialization. Attackers could exploit this flaw to gain unauthorized access to sensitive data, emphasizing the need for immediate attention from users of the affected Qualcomm products.

References