CVE-2024-33013

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ6000; IPQ6010
qualcommar8035_firmware<= *
qualcommcsr8811_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommflight_rb5_5g_platform_firmware<= *
qualcommimmersive_home_214_platform_firmware<= *
qualcommimmersive_home_216_platform_firmware<= *
qualcommimmersive_home_316_platform_firmware<= *
qualcommimmersive_home_318_platform_firmware<= *
qualcommimmersive_home_3210_platform_firmware<= *
qualcommimmersive_home_326_platform_firmware<= *
qualcommipq5010_firmware<= *
qualcommipq5028_firmware<= *
qualcommipq5300_firmware<= *
qualcommipq5302_firmware<= *
qualcommipq5312_firmware<= *
qualcommipq5332_firmware<= *
qualcommipq6000_firmware<= *
qualcommipq6010_firmware<= *
qualcommipq6018_firmware<= *
qualcommipq6028_firmware<= *
qualcommipq8070a_firmware<= *
qualcommipq8071a_firmware<= *
qualcommipq8072a_firmware<= *
qualcommipq8074a_firmware<= *
qualcommipq8076_firmware<= *
qualcommipq8076a_firmware<= *
qualcommipq8078_firmware<= *
qualcommipq8078a_firmware<= *
qualcommipq8173_firmware<= *
qualcommipq8174_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9554_firmware<= *
qualcommipq9574_firmware<= *
qualcommmdm9628_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8620p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca4024_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6554a_firmware<= *
qualcommqca6564a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574_firmware<= *

References

Timeline

Published
Aug 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330147.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330157.5Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor repoCVE-2024-330166.8memory corruption when an invalid firehose patch command is invoked.CVE-2024-330187.5Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.CVE-2024-330197.5Transient DOS while parsing the received TID-to-link mapping action frame.CVE-2024-33023.7There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of MemoryCVE-2024-330207.5Transient DOS while processing TID-to-link mapping IE elements.CVE-2024-330217.8Memory corruption while processing IOCTL call to set metainfo.CVE-2024-330227.8Memory corruption while allocating memory in HGSL driver.CVE-2024-330237.8Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.CVE-2024-330247.5Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.CVE-2024-330257.5Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2024-33013: High severity, CVSS 7.5 | Vulnix