CVE-2024-33048: Buffer Over-read in WLAN Host Cmn
Summary
CVE-2024-33048: ... Affects platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn versions >= SoCVersion:0, < SoCVersion:2024-09-05. Fixed in SoCVersion:2024-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn, which is part of the Android ecosystem. This package is responsible for WLAN functionality and is vulnerable to a buffer over-read issue.
Vulnerability Detail
The buffer over-read vulnerability in WLAN Host Cmn can lead to potential security risks. It originates from specific files and functions within the package, such as umac/mlo_mgr/src/wlan_mlo_t2lm.c and umac/scan/dispatcher/src/wlan_scan_utils_api.c. The vulnerability allows an attacker to read beyond the boundaries of a buffer, potentially exposing sensitive information or causing a denial of service. The severity of this vulnerability is classified as high.
How To Fix
Minimum fixed version
SoCVersion:2024-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The buffer over-read vulnerability in WLAN Host Cmn poses a high security risk and can potentially lead to the exposure of sensitive information or denial of service. It is crucial to update the package to the fixed version to mitigate this vulnerability.
See every vulnerability recorded for platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn →
FAQ
The vulnerability can potentially lead to the exposure of sensitive information or cause a denial of service.
There is no information available regarding any known exploits for this vulnerability at this time.
Yes, this vulnerability can be exploited remotely.
There is no information available regarding active exploitation of this vulnerability.
The severity of this vulnerability is classified as high.
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn.
