CVE-2024-33015: qualcomm, inc. snapdragon Buffer Over-read

Vulnerability summary

CVE-2024-33015 is a high (CVSS 7.5) Buffer Over-read vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.3% of scored vulnerabilities.

Timeline

1. 05-08-2024
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.

• CWE-126Buffer Over-readThe product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.