CVE-2024-49839: High Severity Vulnerability in qca-wifi-host-cmn Package
Summary
CVE-2024-49839: ... Affects platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn versions >= SoCVersion:0, < SoCVersion:2025-02-05. Fixed in SoCVersion:2025-02-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The qca-wifi-host-cmn package is an essential component of the Android ecosystem, providing Wi-Fi connectivity and management functionalities for Qualcomm chipsets. This package is crucial for enabling wireless communication in Android devices, ensuring seamless connectivity and performance. However, it is susceptible to vulnerabilities that can compromise the integrity and security of the devices utilizing it.
Vulnerability Detail
CVE-2024-49839 is a high severity vulnerability found in the qca-wifi-host-cmn package. The vulnerability originates from improper handling of certain operations within the code, specifically in the wlan_mlo_parse_t2lm_info function. If exploited, this vulnerability could allow an attacker to execute arbitrary code, potentially leading to unauthorized access or control over the affected device. The vulnerability affects devices running versions prior to the patch released on February 5, 2025.
How To Fix
Minimum fixed version
SoCVersion:2025-02-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2024-49839 represents a significant security risk for devices utilizing the qca-wifi-host-cmn package. It is essential for users to update their systems to the patched version released on February 5, 2025, to protect against potential exploitation. Regular monitoring and timely updates are crucial for maintaining the security of software applications.
See every vulnerability recorded for platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn →
FAQ
CVE-2024-49839 is a high severity vulnerability in the qca-wifi-host-cmn package that can allow attackers to execute arbitrary code.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
While there are no specific workarounds, it is crucial to monitor your systems and apply the patch as soon as possible to mitigate risks.
Exploitation of this vulnerability could lead to unauthorized access, control over the device, and potential data breaches.
Detailed information about CVE-2024-49839 can be found in the official commit logs and vulnerability databases.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn.
