CVE-2024-33018: Buffer Over-read in WLAN Host
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33018?
The severity of CVE-2024-33018 is classified as high due to its potential to cause a transient denial-of-service (DoS) condition.
How do I fix CVE-2024-33018?
To mitigate CVE-2024-33018, it is recommended to update the affected software or firmware to the latest version provided by your vendor.
What type of systems are affected by CVE-2024-33018?
CVE-2024-33018 affects Qualcomm firmware, specifically those related to various Qualcomm hardware products.
Is CVE-2024-33018 exploitable remotely?
Yes, CVE-2024-33018 is exploitable remotely, allowing an attacker to induce a DoS condition via crafted packets.
When was CVE-2024-33018 disclosed?
CVE-2024-33018 was disclosed in August 2024 as part of a security bulletin related to Qualcomm products.