CVE-2024-38397: Buffer Over-read in WLAN Host Communication | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Oct 7, 2024

CVE-2024-38397

Buffer Over-read in WLAN Host Communication

7.5

CVSS

0.3%

EPSS

No

On KEV

Description

Transient DOS while parsing probe response and assoc response frame.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 25% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SN

Snapdragon · Qualcomm, Inc.

AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 3210 Platform; +34 more · source: vendor

QF

Qcn6432 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qcn9000 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qcn9024 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qcn9074 Firmware · Qualcomm

0 · source: NVD, CISA

QF

Qcn9274 Firmware · Qualcomm

All versions, or not specified · source: NVD

QF

Qcs5430 Firmware · Qualcomm

All versions, or not specified · source: NVD

QF

Qcs6490 Firmware · Qualcomm

All versions, or not specified · source: NVD

QF

Qcs7230 Firmware · Qualcomm

All versions, or not specified · source: NVD

QF

Qcs8250 Firmware · Qualcomm

All versions, or not specified · source: NVD

QF

Qcs8550 Firmware · Qualcomm

All versions, or not specified · source: NVD

QF

Qfw7114 Firmware · Qualcomm

All versions, or not specified · source: NVD

Affected product

SN

Snapdragon

Qualcomm, Inc.

All Snapdragon CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2024-38397

https://www.cve.org/CVERecord?id=CVE-2024-38397

Vendor Advisory

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

More from Snapdragon

8.6

Incorrect Authorization in Graphics

8.6

Incorrect Authorization in Graphics Windows

7.8

Integer Overflow or Wraparound in Graphics

7.8

Use After Free in DSP Service

7.8

Integer Overflow or Wraparound in Graphics Linux