CVE-2024-49839: Critical severity Qualcomm Ar8035 Firmware vulnerability
Memory corruption during management frame processing due to mismatch in T2LM info element.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2025-02-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49839?
CVE-2024-49839 has been rated as high severity due to the potential for memory corruption during management frame processing.
How do I fix CVE-2024-49839?
To fix CVE-2024-49839, apply the latest firmware updates provided by Qualcomm for the affected devices.
Which devices are affected by CVE-2024-49839?
CVE-2024-49839 affects multiple Qualcomm firmware including, but not limited to, AR8035, CSR8811, and FastConnect series.
What are the potential impacts of CVE-2024-49839?
The potential impacts of CVE-2024-49839 include possible crashes or exploitation leading to unauthorized access.
Is CVE-2024-49839 actively exploited?
As of now, there is no evidence indicating that CVE-2024-49839 is actively being exploited in the wild.