CVE-2024-33049 — Buffer Over-read in WLAN Host Communication

Description (CNA)

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected CSR8811; affected FastConnect 6700; affected FastConnect 7800; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5010; affected IPQ5028; affected IPQ5300; affected IPQ5302; affected IPQ5312; affected IPQ5332; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8070A; affected IPQ8071A; affected IPQ8072A; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9554; affected IPQ9574; affected MDM9628; affected QAM8255P; affected QAM8295P; affected QCA4024; affected QCA6175A; affected QCA6554A; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6678AQ; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected QCA6777AQ; affected QCA6787AQ; affected QCA6797AQ; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8386; affected QCA9367; affected QCA9377; affected QCA9888; affected QCA9889; affected QCC2073; affected QCC2076; affected QCF8000; affected QCF8001; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN6402; affected QCN6412; affected QCN6422; affected QCN6432; affected QCN9000; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9160; affected QCN9274; affected QCS6490; affected Qualcomm Video Collaboration VC3 Platform; affected QXM8083; affected SA4150P; affected SA4155P; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA9000P; affected SDX55; affected SDX65M; affected SG4150P; affected Snapdragon 680 4G Mobile Platform; affected Snapdragon 685 4G Mobile Platform (SM6225-AD); affected Snapdragon Auto 5G Modem-RF; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon W5+ Gen 1 Wearable Platform; affected Snapdragon X65 5G Modem-RF System; affected SW5100; affected SW5100P; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3950; affected WCN3980; affected WCN3988; affected WSA8810; affected WSA8830; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected CSR8811; affected FastConnect 6700; affected FastConnect 7800; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5010; affected IPQ5028; affected IPQ5300; affected IPQ5302; affected IPQ5312; affected IPQ5332; affected IPQ6000; affected IPQ6010; affected IPQ6018; affected IPQ6028; affected IPQ8070A; affected IPQ8071A; affected IPQ8072A; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9554; affected IPQ9574; affected MDM9628; affected QAM8255P; affected QAM8295P; affected QCA4024; affected QCA6175A; affected QCA6554A; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6678AQ; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected QCA6777AQ; affected QCA6787AQ; affected QCA6797AQ; affected QCA8075; affected QCA8081; affected QCA8082; affected QCA8084; affected QCA8085; affected QCA8386; affected QCA9367; affected QCA9377; affected QCA9888; affected QCA9889; affected QCC2073; affected QCC2076; affected QCF8000; affected QCF8001; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN6023; affected QCN6024; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN6402; affected QCN6412; affected QCN6422; affected QCN6432; affected QCN9000; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9160; affected QCN9274; affected QCS6490; affected Qualcomm Video Collaboration VC3 Platform; affected QXM8083; affected SA4150P; affected SA4155P; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA9000P; affected SDX55; affected SDX65M; affected SG4150P; affected Snapdragon 680 4G Mobile Platform; affected Snapdragon 685 4G Mobile Platform (SM6225-AD); affected Snapdragon Auto 5G Modem-RF; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon W5+ Gen 1 Wearable Platform; affected Snapdragon X65 5G Modem-RF System; affected SW5100; affected SW5100P; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3950; affected WCN3980; affected WCN3988; affected WSA8810; affected WSA8830; affected WSA8835

CWE

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.