CVE-2024-33057: Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33057?
The severity of CVE-2024-33057 has not been explicitly assigned but involves a transient denial of service issue.
How do I fix CVE-2024-33057?
To fix CVE-2024-33057, ensure that vulnerable software is updated to the latest version provided by the vendor.
What software is affected by CVE-2024-33057?
CVE-2024-33057 affects several Qualcomm firmware products, as well as Google Android devices.
What kind of attack does CVE-2024-33057 facilitate?
CVE-2024-33057 facilitates a denial of service attack due to improper handling of the multi-link element Control field.
Is CVE-2024-33057 a critical vulnerability?
CVE-2024-33057 is not designated as critical, but it does pose potential denial of service risks that should be addressed.