Skip to main content

Return of Stack Variable Address

CVE-2024-33045

Severity High
Score 8.4/10

Summary

Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-562 - Return of Stack Variable Address

A function returns the address of a stack variable, which will cause unintended program behavior, typically in the form of a crash.

References

Advisory Timeline

  • Published