by Kastro
Paper/Archive/CVE-2024-49839

CVE-2024-49839

Qualcomm, Inc. Snapdragon — Buffer Over-read in WLAN Host Cmn

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 22.2.222 × 204.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption during management frame processing due to mismatch in T2LM info element.

Affected

ProductAffectedFixed inSource
SnapdragonAR8035–CNA
SnapdragonCSR8811–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6900–CNA
SnapdragonFastConnect 7800–CNA
SnapdragonImmersive Home 214 Platform–CNA
SnapdragonImmersive Home 216 Platform–CNA
SnapdragonImmersive Home 316 Platform–CNA
SnapdragonImmersive Home 318 Platform–CNA
SnapdragonImmersive Home 3210 Platform–CNA
SnapdragonImmersive Home 326 Platform–CNA
SnapdragonIPQ5010–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcomm (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refdocs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html