CVE-2024-33026: Buffer Over-read in WLAN Host
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33026?
CVE-2024-33026 is classified as a transient Denial of Service (DoS) vulnerability.
How do I fix CVE-2024-33026?
To address CVE-2024-33026, update your device's firmware to the latest version provided by the vendor.
Which software is affected by CVE-2024-33026?
CVE-2024-33026 affects various Qualcomm firmware as well as specific versions of Google Android.
What is the impact of CVE-2024-33026?
The vulnerability can lead to a transient Denial of Service condition when parsing probe and association response frames.
Is there a patch available for CVE-2024-33026?
Yes, vendors are expected to release patches or firmware updates to mitigate the risks associated with CVE-2024-33026.