PT-2024-25109 · Qualcomm · Snapdragon+3

Published 2024-10-07 · Updated 2024-10-16 · CVE-2024-33071

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A temporary denial of service might occur when parsing the MBSSID Information Element (IE) in beacons if the IE length is zero. This issue is related to the parsing of beacons with a zero-length MBSSID IE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

CVE-2024-33071

Affected Products

Snapdragon

Mdm9628 Firmware

Qca6564Au Firmware

Qca6574Au Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-33071 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1843284014754308430 · Twitter Post
• https://t.me/latest_high_impact_cve/1279 · Telegram Post
• https://t.me/cvedetector/7223 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1843310170455019942 · Twitter Post