CVE-2024-33010: Use After Free in WLAN Host
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What are the potential impacts of CVE-2024-33010?
CVE-2024-33010 can lead to a transient Denial of Service (DoS) during the parsing of MBSSID IE fragments from beacon frames.
What versions are affected by CVE-2024-33010?
CVE-2024-33010 affects various Qualcomm firmware versions, impacting devices utilizing these firmware releases.
What mitigations exist for CVE-2024-33010?
The primary mitigation for CVE-2024-33010 is to apply the latest patches and firmware updates released by Qualcomm and device manufacturers.
How can CVE-2024-33010 be exploited?
CVE-2024-33010 can be exploited by attackers sending specially crafted beacon frames containing specific fragment data.
Is user intervention required to fix CVE-2024-33010?
Yes, users need to manually update their devices with the latest security patches to mitigate CVE-2024-33010.