CVE-2024-33024: Integer Overflow or Wraparound in WLAN Host
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33024?
CVE-2024-33024 has been categorized as a high severity vulnerability due to its ability to cause transient denial of service during the parsing of maliciously crafted messages.
How do I fix CVE-2024-33024?
To resolve CVE-2024-33024, it is recommended to update your affected Qualcomm firmware to the latest version that addresses the vulnerability.
What products are affected by CVE-2024-33024?
CVE-2024-33024 affects various Qualcomm products, including certain Qualcomm firmware used in Android devices and network equipment.
What type of vulnerability is CVE-2024-33024?
CVE-2024-33024 is classified as a denial of service vulnerability that can be exploited when processing specific message formats.
When was CVE-2024-33024 published?
CVE-2024-33024 was published in August 2024 as part of a security bulletin focusing on Qualcomm firmware vulnerabilities.