Name: Vulnix
Price: 99 USD

Description

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6900; FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5312; IPQ5332; IPQ9008; IPQ9554; IPQ9570; IPQ9574; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA0000; QCA6391
qualcomm	ar8035_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	immersive_home_3210_platform_firmware	<= *
qualcomm	immersive_home_326_platform_firmware	<= *
qualcomm	ipq5300_firmware	<= *
qualcomm	ipq5312_firmware	<= *
qualcomm	ipq5332_firmware	<= *
qualcomm	ipq9008_firmware	<= *
qualcomm	ipq9554_firmware	<= *
qualcomm	ipq9570_firmware	<= *
qualcomm	ipq9574_firmware	<= *
qualcomm	qam8255p_firmware	<= *
qualcomm	qam8295p_firmware	<= *
qualcomm	qam8650p_firmware	<= *
qualcomm	qam8775p_firmware	<= *
qualcomm	qamsrv1h_firmware	<= *
qualcomm	qamsrv1m_firmware	<= *
qualcomm	qca0000_firmware	<= *
qualcomm	qca6391_firmware	<= *
qualcomm	qca6554a_firmware	<= *
qualcomm	qca6564au_firmware	<= *
qualcomm	qca6574_firmware	<= *
qualcomm	qca6574a_firmware	<= *
qualcomm	qca6574au_firmware	<= *
qualcomm	qca6584au_firmware	<= *
qualcomm	qca6595_firmware	<= *
qualcomm	qca6595au_firmware	<= *
qualcomm	qca6678aq_firmware	<= *
qualcomm	qca6688aq_firmware	<= *
qualcomm	qca6696_firmware	<= *
qualcomm	qca6698aq_firmware	<= *
qualcomm	qca6777aq_firmware	<= *
qualcomm	qca6787aq_firmware	<= *
qualcomm	qca6797aq_firmware	<= *
qualcomm	qca8075_firmware	<= *
qualcomm	qca8081_firmware	<= *
qualcomm	qca8082_firmware	<= *
qualcomm	qca8084_firmware	<= *
qualcomm	qca8085_firmware	<= *
qualcomm	qca8337_firmware	<= *
qualcomm	qca8386_firmware	<= *
qualcomm	qcc710_firmware	<= *
qualcomm	qcf8000_firmware	<= *
qualcomm	qcf8001_firmware	<= *
qualcomm	qcm8550_firmware	<= *
qualcomm	qcn5124_firmware	<= *
qualcomm	qcn6224_firmware	<= *
qualcomm	qcn6274_firmware	<= *

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Dec 2, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

CVE-2024-33063