CVE-2024-49838: High severity Qualcomm Ar8035 Firmware vulnerability
Information disclosure while parsing the OCI IE with invalid length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qcacld-3.0to a version that resolves this vulnerability.Fixed in SoCVersion:2025-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49838?
CVE-2024-49838 has been classified as a medium severity vulnerability due to the potential information disclosure while parsing the OCI IE with invalid length.
How do I fix CVE-2024-49838?
To address CVE-2024-49838, ensure you are using the updated firmware version provided by Qualcomm that addresses the vulnerability.
What software is affected by CVE-2024-49838?
CVE-2024-49838 impacts various Qualcomm firmware versions across multiple Qualcomm chipsets.
What kind of vulnerability is CVE-2024-49838?
CVE-2024-49838 is an information disclosure vulnerability that occurs during the parsing of OCI IE with an invalid length.
Can CVE-2024-49838 be exploited remotely?
Exploitation of CVE-2024-49838 typically requires local access to the affected system, making remote exploitation less likely.