CVE-2024-33051
HIGHCVSS 7.5/10EPSS 0.30%
Last modified
CVE-2024-33051 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | 315 5g Iot Firmware | All versions |
| Qualcomm | 9206 Lte Firmware | All versions |
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Csrb31024 Firmware | All versions |
| Qualcomm | Fastconnect 6200 Firmware | All versions |
| Qualcomm | Fastconnect 6700 Firmware | All versions |
| Qualcomm | Fastconnect 6800 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Flight Rb5 5g Firmware | All versions |
| Qualcomm | Home Hub 100 Firmware | All versions |
| Qualcomm | Mdm8215 Firmware | All versions |
| Qualcomm | Mdm9215 Firmware | All versions |
| Qualcomm | Mdm9250 Firmware | All versions |
| Qualcomm | Mdm9310 Firmware | All versions |
| Qualcomm | Mdm9615 Firmware | All versions |
| Qualcomm | Mdm9628 Firmware | All versions |
| Qualcomm | Mdm9640 Firmware | All versions |
| Qualcomm | Mdm9645 Firmware | All versions |
| Qualcomm | Mdm9650 Firmware | All versions |
| Qualcomm | Msm8996au Firmware | All versions |
| Qualcomm | Qam8255p Firmware | All versions |
| Qualcomm | Qam8295p Firmware | All versions |
| Qualcomm | Qam8620p Firmware | All versions |
| Qualcomm | Qam8650p Firmware | All versions |
| Qualcomm | Qam8775p Firmware | All versions |
| Qualcomm | Qamsrv1h Firmware | All versions |
| Qualcomm | Qamsrv1m Firmware | All versions |
| Qualcomm | Qca1062 Firmware | All versions |
| Qualcomm | Qca1064 Firmware | All versions |
| Qualcomm | Qca2062 Firmware | All versions |
| Qualcomm | Qca2064 Firmware | All versions |
| Qualcomm | Qca2065 Firmware | All versions |
| Qualcomm | Qca2066 Firmware | All versions |
| Qualcomm | Qca6174 Firmware | All versions |
| Qualcomm | Qca6174a Firmware | All versions |
| Qualcomm | Qca6175a Firmware | All versions |
| Qualcomm | Qca6310 Firmware | All versions |
| Qualcomm | Qca6320 Firmware | All versions |
| Qualcomm | Qca6335 Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qca6420 Firmware | All versions |
| Qualcomm | Qca6421 Firmware | All versions |
| Qualcomm | Qca6426 Firmware | All versions |
| Qualcomm | Qca6430 Firmware | All versions |
Showing 50 of 289 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-33051?
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
How severe is CVE-2024-33051?
CVE-2024-33051 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.30% probability of exploitation in the next 30 days.
How do I fix CVE-2024-33051?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-33045Memory corruption when BTFM client sends new messages over S…7.8
- CVE-2024-33047Memory corruption when the captureRead QDCM command is invok…7.8
- CVE-2024-33048Transient DOS while parsing the received TID-to-link mapping…7.5
- CVE-2024-33049Transient DOS while parsing noninheritance IE of Extension e…7.5
- CVE-2024-3305Authorization Bypass Through User-Controlled Key, Missing Au…7.5
- CVE-2024-33050Transient DOS while parsing MBSSID during new IE generation …7.5
- CVE-2024-33052Memory corruption when user provides data for FM HCI command…7.8
- CVE-2024-33053Memory corruption when multiple threads try to unregister th…6.7
- CVE-2024-33054Memory corruption during the handshake between the Primary V…7.8
- CVE-2024-33055Memory corruption while invoking IOCTL calls to unmap the DM…7.8
- CVE-2024-33056Memory corruption when allocating and accessing an entry in …7.8
- CVE-2024-33057Transient DOS while parsing the multi-link element Control f…7.5
Are you affected by CVE-2024-33051?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
