CVE-2024-33011: Buffer Over-read in WLAN Host
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33011?
CVE-2024-33011 has been classified with a medium severity level due to the transient denial of service potential.
How do I fix CVE-2024-33011?
To address CVE-2024-33011, ensure your device's firmware is updated to the latest version released by the manufacturer.
Which devices are affected by CVE-2024-33011?
CVE-2024-33011 affects various Qualcomm devices including Android and specific Qualcomm firmware implementations.
What are the potential impacts of CVE-2024-33011?
The impact of CVE-2024-33011 includes a possible transient denial of service during parsing of the MBSSID IE.
Is CVE-2024-33011 publicly known?
Yes, CVE-2024-33011 is publicly disclosed and detailed in security bulletins by Qualcomm and Android.