CVE-2024-33050: Buffer Over-read in WLAN Host Cmn
Summary
CVE-2024-33050: ... Affects platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn versions >= SoCVersion:0, < SoCVersion:2024-09-05. Fixed in SoCVersion:2024-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn, which is part of the Android ecosystem. This package is responsible for managing WLAN functionality on Qualcomm chipsets. It provides common utilities and functions for WLAN host communication. The vulnerability in this package allows for a buffer over-read, which can lead to potential security breaches and unauthorized access to sensitive information.
Vulnerability Detail
The buffer over-read vulnerability in WLAN Host Cmn arises from a specific function called util_gen_new_ie in the wlan_scan_utils_api.c file. This function fails to properly validate user-supplied input, leading to a buffer over-read condition. An attacker can exploit this vulnerability to read beyond the boundaries of a buffer, potentially exposing sensitive data or causing a denial of service. The impact of this vulnerability can range from information disclosure to remote code execution, depending on the attacker's intentions and the specific context in which the vulnerable function is used.
How To Fix
Minimum fixed version
SoCVersion:2024-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The buffer over-read vulnerability in WLAN Host Cmn poses a significant security risk, potentially leading to unauthorized access and information disclosure. It is crucial to update the package to the latest version and apply the provided fix to mitigate this vulnerability.
See every vulnerability recorded for platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn →
FAQ
The impact of this vulnerability can range from information disclosure to remote code execution, depending on the attacker's intentions and the specific context in which the vulnerable function is used.
To fix this vulnerability, update the package to the latest version that includes the necessary security patches. Apply the fix provided in the commit bb98d2a5d721e8fdc6c2396735011f5064d08bcd.
No workaround has been provided for this vulnerability.
You can find more information about this vulnerability in the ASB-A-344620238.json file available at the source link: https://storage.googleapis.com/android-osv/ASB-A-344620238.json
You can use Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn.
