PT-2025-2869 · Qualcomm · Qualcomm

Published 2025-02-03 · Updated 2025-02-04 · CVE-2024-49839

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm (affected versions not specified)

Description The issue is related to memory corruption during management frame processing due to a mismatch in the T2LM info element. This corruption occurs during the processing of administration framework.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

BDU:2025-04017

CVE-2024-49839

Affected Products

Qualcomm

References · 8

• https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-49839 · Security Note
• https://twitter.com/CVEnew/status/1886462814975369426 · Twitter Post
• https://twitter.com/BursaMatus/status/1886495130246430874 · Twitter Post
• https://t.me/cvedetector/17096 · Telegram Post
• https://git.codelinaro.org/clo/la/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/-/commit/4f3dcb1672f396d621cb562a371cd00629ff188d · Note
• https://reddit.com/r/k12cybersecurity/comments/1ihj62l/msisac_cybersecurity_advisory_multiple · Reddit Post