CVE-2024-33015

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Aug 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330166.8memory corruption when an invalid firehose patch command is invoked.CVE-2024-330187.5Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.CVE-2024-330197.5Transient DOS while parsing the received TID-to-link mapping action frame.CVE-2024-33023.7There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of MemoryCVE-2024-330207.5Transient DOS while processing TID-to-link mapping IE elements.CVE-2024-330217.8Memory corruption while processing IOCTL call to set metainfo.CVE-2024-330227.8Memory corruption while allocating memory in HGSL driver.CVE-2024-330237.8Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.CVE-2024-330247.5Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.CVE-2024-330257.5Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.CVE-2024-330267.5Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.CVE-2024-330277.8Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table
CVE-2024-33015: High severity, CVSS 7.5 | Vulnix