CVE-2024-33015 — Buffer Over-read in WLAN Host

Description (CNA)

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected AR8035; affected CSR8811; affected FastConnect 6200; affected FastConnect 6700; affected FastConnect 6900; affected FastConnect 7800; affected Flight RB5 5G Platform; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5010; affected IPQ5028; affected IPQ5300; affected IPQ5302; affected IPQ5312; affected IPQ5332; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8070A; affected IPQ8071A; affected IPQ8072A; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9554; affected IPQ9574; affected QAM8255P; affected QAM8295P; affected QAM8620P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA4024; affected QCA6391; affected QCA6554A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6678AQ; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected QCA6797AQ; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8337; affected QCA8386; affected QCA9888; affected QCA9889; affected QCC2073; affected QCC2076; affected QCC710; affected QCF8000; affected QCF8001; affected QCM4325; affected QCM4490; affected QCM5430; affected QCM6125; affected QCM6490; affected QCM8550; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN6224; affected QCN6274; affected QCN6402; affected QCN6412; affected QCN6422; affected QCN6432; affected QCN9000; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9160; affected QCN9274; affected QCS4490; affected QCS5430; affected QCS6125; affected QCS6490; affected QCS7230; affected QCS8250; affected QCS8550; affected QFW7114; affected QFW7124; affected QRB5165N; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected Qualcomm Video Collaboration VC5 Platform; affected QXM8083; affected Robotics RB5 Platform; affected SA6155P; affected SA7255P; affected SA7775P; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA8620P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected SD 8 Gen1 5G; affected SDX55; affected SDX65M; affected SG4150P; affected SG8275P; affected SM8550P; affected Snapdragon 4 Gen 1 Mobile Platform; affected Snapdragon 4 Gen 2 Mobile Platform; affected Snapdragon 460 Mobile Platform; affected Snapdragon 480 5G Mobile Platform; affected Snapdragon 480+ 5G Mobile Platform (SM4350-AC); affected Snapdragon 662 Mobile Platform; affected Snapdragon 680 4G Mobile Platform; affected Snapdragon 685 4G Mobile Platform (SM6225-AD); affected Snapdragon 695 5G Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 8 Gen 2 Mobile Platform; affected Snapdragon 8 Gen 3 Mobile Platform; affected Snapdragon 8+ Gen 1 Mobile Platform; affected Snapdragon 8+ Gen 2 Mobile Platform; affected Snapdragon AR2 Gen 1 Platform; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon W5+ Gen 1 Wearable Platform; affected Snapdragon X65 5G Modem-RF System; affected Snapdragon X72 5G Modem-RF System; affected Snapdragon X75 5G Modem-RF System; affected SRV1H; affected SRV1L; affected SRV1M; affected SSG2115P; affected SSG2125P; affected SW5100; affected SW5100P; affected SXR1230P; affected SXR2230P; affected SXR2250P; affected TalynPlus; affected Vision Intelligence 400 Platform; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCD9390; affected WCD9395; affected WCN3950; affected WCN3980; affected WCN3988; affected WCN3990; affected WCN6740; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8832; affected WSA8835; affected WSA8840; affected WSA8845; affected WSA8845H

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected AR8035; affected CSR8811; affected FastConnect 6200; affected FastConnect 6700; affected FastConnect 6900; affected FastConnect 7800; affected Flight RB5 5G Platform; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5010; affected IPQ5028; affected IPQ5300; affected IPQ5302; affected IPQ5312; affected IPQ5332; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8070A; affected IPQ8071A; affected IPQ8072A; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9554; affected IPQ9574; affected QAM8255P; affected QAM8295P; affected QAM8620P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA4024; affected QCA6391; affected QCA6554A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6678AQ; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected QCA6797AQ; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8337; affected QCA8386; affected QCA9888; affected QCA9889; affected QCC2073; affected QCC2076; affected QCC710; affected QCF8000; affected QCF8001; affected QCM4325; affected QCM4490; affected QCM5430; affected QCM6125; affected QCM6490; affected QCM8550; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN6224; affected QCN6274; affected QCN6402; affected QCN6412; affected QCN6422; affected QCN6432; affected QCN9000; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9160; affected QCN9274; affected QCS4490; affected QCS5430; affected QCS6125; affected QCS6490; affected QCS7230; affected QCS8250; affected QCS8550; affected QFW7114; affected QFW7124; affected QRB5165N; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected Qualcomm Video Collaboration VC5 Platform; affected QXM8083; affected Robotics RB5 Platform; affected SA6155P; affected SA7255P; affected SA7775P; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA8620P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected SD 8 Gen1 5G; affected SDX55; affected SDX65M; affected SG4150P; affected SG8275P; affected SM8550P; affected Snapdragon 4 Gen 1 Mobile Platform; affected Snapdragon 4 Gen 2 Mobile Platform; affected Snapdragon 460 Mobile Platform; affected Snapdragon 480 5G Mobile Platform; affected Snapdragon 480+ 5G Mobile Platform (SM4350-AC); affected Snapdragon 662 Mobile Platform; affected Snapdragon 680 4G Mobile Platform; affected Snapdragon 685 4G Mobile Platform (SM6225-AD); affected Snapdragon 695 5G Mobile Platform; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 8 Gen 2 Mobile Platform; affected Snapdragon 8 Gen 3 Mobile Platform; affected Snapdragon 8+ Gen 1 Mobile Platform; affected Snapdragon 8+ Gen 2 Mobile Platform; affected Snapdragon AR2 Gen 1 Platform; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon W5+ Gen 1 Wearable Platform; affected Snapdragon X65 5G Modem-RF System; affected Snapdragon X72 5G Modem-RF System; affected Snapdragon X75 5G Modem-RF System; affected SRV1H; affected SRV1L; affected SRV1M; affected SSG2115P; affected SSG2125P; affected SW5100; affected SW5100P; affected SXR1230P; affected SXR2230P; affected SXR2250P; affected TalynPlus; affected Vision Intelligence 400 Platform; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCD9390; affected WCD9395; affected WCN3950; affected WCN3980; affected WCN3988; affected WCN3990; affected WCN6740; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8832; affected WSA8835; affected WSA8840; affected WSA8845; affected WSA8845H

CWE

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.