CVE-2024-49838: High Severity Vulnerability in qcom-opensource wlan qcacld-3.0 Package
Summary
CVE-2024-49838: ... Affects platform/vendor/qcom-opensource/wlan/qcacld-3.0 versions >= SoCVersion:0, < SoCVersion:2025-03-05. Fixed in SoCVersion:2025-03-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The qcom-opensource wlan qcacld-3.0 package is a component of the Android ecosystem that provides wireless LAN capabilities for Qualcomm chipsets. This package is crucial for enabling Wi-Fi connectivity and managing wireless communication protocols. Given its role in handling network traffic, any vulnerabilities within this package can lead to significant security risks, including unauthorized access and data breaches.
Vulnerability Detail
The vulnerability identified as CVE-2024-49838 stems from a flaw in the lim_check_oci_match function located in the lim_process_action_frame.c file. This issue can potentially allow attackers to exploit the wireless communication protocols, leading to unauthorized access to sensitive data or disruption of network services. The severity of this vulnerability is classified as high, indicating that it poses a serious risk to systems utilizing this package.
How To Fix
Minimum fixed version
SoCVersion:2025-03-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to limit the exposure of their devices to untrusted networks until the patch can be applied. This can be done by disabling Wi-Fi when not in use or by using a VPN to encrypt network traffic.
Conclusion
In summary, CVE-2024-49838 represents a significant security risk within the qcom-opensource wlan qcacld-3.0 package. It is crucial for users to apply the necessary updates to mitigate potential threats and ensure the security of their wireless communications.
See every vulnerability recorded for platform/vendor/qcom-opensource/wlan/qcacld-3.0 →
FAQ
CVE-2024-49838 is a high severity vulnerability found in the qcom-opensource wlan qcacld-3.0 package that can lead to unauthorized access and data breaches.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include potential unauthorized access to sensitive data, disruption of network services, and exploitation of wireless communication protocols.
The vulnerability was published on March 1, 2025.
If immediate updates are not possible, consider using workarounds such as limiting exposure to untrusted networks and using a VPN.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/wlan/qcacld-3.0.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
