CVE-2024-45571: Use After Free in WLAN Host Communication
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2025-02-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45571?
CVE-2024-45571 has a high severity rating due to the potential for memory corruption affecting the WLAN interface.
How do I fix CVE-2024-45571?
To fix CVE-2024-45571, users should update the affected Qualcomm firmware to the latest version provided by Qualcomm.
Which devices are affected by CVE-2024-45571?
CVE-2024-45571 affects various Qualcomm devices including models of ar8035, csr8811, and fastconnect firmware among others.
What could be the potential impact of CVE-2024-45571?
If exploited, CVE-2024-45571 could lead to denial of service or arbitrary code execution through memory corruption.
Is there a workaround for CVE-2024-45571?
Currently, no specific workarounds for CVE-2024-45571 are recommended, and updating firmware is advised.