CVE-2024-33049: Buffer Over-read in WLAN Host Communication
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-10-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33049?
CVE-2024-33049 is classified as a transient Denial of Service vulnerability.
How do I fix CVE-2024-33049?
To fix CVE-2024-33049, ensure your affected Qualcomm firmware is updated to the latest version that addresses this issue.
Which products are affected by CVE-2024-33049?
CVE-2024-33049 affects various Qualcomm firmware products including those in the Snapdragon and WSA series.
What happens if I don't fix CVE-2024-33049?
If CVE-2024-33049 is not fixed, devices may experience intermittently disrupted services due to denial of service conditions.
Is CVE-2024-33049 present in Android devices?
Yes, CVE-2024-33049 can impact Android devices that utilize the affected Qualcomm firmware.