CVE-2024-33013: Buffer Over-read in WLAN Host
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33013?
CVE-2024-33013 is classified as a transient denial of service vulnerability.
How does CVE-2024-33013 occur?
CVE-2024-33013 occurs when a driver accesses the ML IE memory and increments the offset value beyond the ML IE length.
Who is affected by CVE-2024-33013?
CVE-2024-33013 affects various versions of Qualcomm firmware across multiple products, including Google Android devices.
How can I fix CVE-2024-33013?
To fix CVE-2024-33013, users should apply patches or updates provided by their device manufacturer.
Is CVE-2024-33013 exploitable remotely?
CVE-2024-33013 may be exploitable in certain contexts, depending on device configuration and network setup.