CVE-2024-33069 json
Use After Free in WLAN Host
published 2024-10-07 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-30814
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 29%
- public exploits
- 0
- none known
Summary
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.36% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Qualcomm, Inc. Snapdragon
- qualcomm fastconnect_6800_firmware
- qualcomm fastconnect_6900_firmware
- qualcomm fastconnect_7800_firmware
- qualcomm qam8295p_firmware
- qualcomm qca6391_firmware
- qualcomm qca6421_firmware
- qualcomm qca6426_firmware
- qualcomm qca6431_firmware
- qualcomm qca6436_firmware
- qualcomm qca6554a_firmware
- qualcomm qca6564au_firmware
- qualcomm qca6574_firmware
- qualcomm qca6574a_firmware
- qualcomm qca6574au_firmware
- qualcomm qca6584au_firmware
- qualcomm qca6595_firmware
- qualcomm qca6595au_firmware
- qualcomm qca6678aq_firmware
- qualcomm qca6688aq_firmware
- qualcomm qca6696_firmware
- qualcomm qca6698aq_firmware
- qualcomm qca6777aq_firmware
- qualcomm qca6787aq_firmware
- qualcomm qca6797aq_firmware
- qualcomm qcc2073_firmware
- qualcomm qcc2076_firmware
- qualcomm sa8295p_firmware
- qualcomm sa8530p_firmware
- qualcomm sa8540p_firmware
- qualcomm sa9000p_firmware
- qualcomm snapdragon_865_5g_mobile_platform_firmware
- qualcomm snapdragon_x55_5g_modem-rf_system_firmware
- qualcomm sw5100_firmware
- qualcomm sw5100p_firmware
- qualcomm wcd9380_firmware
- qualcomm wcd9385_firmware
- qualcomm wcn3980_firmware
- qualcomm wcn3988_firmware
- qualcomm wsa8810_firmware
- qualcomm wsa8815_firmware
- qualcomm wsa8830_firmware
- qualcomm wsa8835_firmware
Classification
- Weakness
-
- CWE-416 Use After Free
References
Sources
- CVE List CVE-2024-33069
- NVD CVE-2024-33069
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.