CVE-2024-33068

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6900; FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5302; IPQ5312; IPQ5332; IPQ9008; IPQ9574; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6391; QCA6554A; QCA6564AU
qualcommar8035_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommimmersive_home_3210_platform_firmware<= *
qualcommimmersive_home_326_platform_firmware<= *
qualcommipq5302_firmware<= *
qualcommipq5312_firmware<= *
qualcommipq5332_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9574_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8620p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6554a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6678aq_firmware<= *
qualcommqca6688aq_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqca6777aq_firmware<= *
qualcommqca6787aq_firmware<= *
qualcommqca6797aq_firmware<= *
qualcommqca8081_firmware<= *
qualcommqca8082_firmware<= *
qualcommqca8084_firmware<= *
qualcommqca8085_firmware<= *
qualcommqca8337_firmware<= *
qualcommqca8386_firmware<= *
qualcommqcc710_firmware<= *
qualcommqcf8000_firmware<= *
qualcommqcf8001_firmware<= *
qualcommqcm8550_firmware<= *
qualcommqcn5124_firmware<= *
qualcommqcn6224_firmware<= *
qualcommqcn6274_firmware<= *
qualcommqcn6402_firmware<= *
qualcommqcn6412_firmware<= *
qualcommqcn6422_firmware<= *

References

Timeline

Published
Nov 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330697.5Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.CVE-2024-33075.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attCVE-2024-330707.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330717.5Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.CVE-2024-330738.2Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.CVE-2024-330789.8Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code executionCVE-2024-33085.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's atCVE-2024-33095.4The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all vCVE-2024-331016.1A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrarCVE-2024-331025.4A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitraCVE-2024-331036.1An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by CVE-2024-331099.8Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files
CVE-2024-33068: Medium severity, CVSS 6.5 | Vulnix