CVE-2024-33070

Monday, October 07, 2024

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Transient DOS while parsing ESP IE from beacon/probe response frame.

Affected Software

Vendor	Product	Version Range	Status
Qualcomm, Inc.	Snapdragon	`MDM9628`	affected
Qualcomm, Inc.	Snapdragon	`QCA6564A`	affected
Qualcomm, Inc.	Snapdragon	`QCA6564AU`	affected
Qualcomm, Inc.	Snapdragon	`QCA6574A`	affected
Qualcomm, Inc.	Snapdragon	`QCA6574AU`	affected

Weaknesses

CWE-126: CWE-126 Buffer Over-read

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: partial

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.