CVE-2024-33051

Q: What is the severity of CVE-2024-33051?

CVE-2024-33051 has a CVSS score of 7.5 (HIGH). This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in affected Wi-Fi systems by sending specially crafted beacon frames with malformed TIM (Traffic Indication Map) Information Elements. The vulnerability affects Qualcomm Wi-Fi chipsets and devices using them, potentially impacting smartphones, routers, IoT devices, and other wireless equipment.

7.5 HIGH

Denial of Service Buffer Overflow

📋 TL;DR

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition in affected Wi-Fi systems by sending specially crafted beacon frames with malformed TIM (Traffic Indication Map) Information Elements. The vulnerability affects Qualcomm Wi-Fi chipsets and devices using them, potentially impacting smartphones, routers, IoT devices, and other wireless equipment.

💻 Affected Systems

Products:

Qualcomm Wi-Fi chipsets and devices using them

Versions: Specific versions not publicly detailed; refer to Qualcomm September 2024 bulletin

Operating Systems: Android, Linux-based systems, embedded OS using Qualcomm Wi-Fi

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with vulnerable Qualcomm Wi-Fi firmware; exact device models depend on chipset implementation.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system crash or reboot of affected wireless devices, disrupting all network connectivity until manual intervention.

🟠

Likely Case

Temporary wireless service disruption affecting connected devices, requiring device restart to restore functionality.

🟢

If Mitigated

Minimal impact with proper network segmentation and monitoring; isolated wireless segment disruption.

🌐 Internet-Facing: MEDIUM - Attackers can exploit remotely via wireless networks, but requires proximity to target network.

🏢 Internal Only: MEDIUM - Internal attackers with wireless access could disrupt local network services.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Exploitation requires sending malformed beacon frames to target wireless interface; no authentication needed.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm September 2024 security bulletin for specific firmware versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates. 2. Apply Qualcomm-provided firmware patches. 3. Reboot affected devices. 4. Verify patch installation.

🔧 Temporary Workarounds

Wireless Network Segmentation

all

Isolate vulnerable devices on separate wireless networks to limit blast radius

Beacon Frame Filtering

all

Implement network monitoring to detect and block malformed beacon frames

🧯 If You Can't Patch

Implement strict wireless access controls and network segmentation
Deploy wireless intrusion detection systems to monitor for beacon frame anomalies

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against Qualcomm's advisory; devices with unpatched Qualcomm Wi-Fi chipsets are vulnerable

Check Version:

Device-specific commands vary; typically 'iwconfig', 'dmesg | grep -i qualcomm', or manufacturer-specific firmware check

Verify Fix Applied:

Verify firmware version has been updated to patched version specified in Qualcomm bulletin

📡 Detection & Monitoring

Log Indicators:

System crashes or reboots of wireless devices
Kernel panic logs related to Wi-Fi drivers
Unexpected wireless interface resets

Network Indicators:

Unusual beacon frame patterns
Malformed TIM IE in wireless captures
Sudden wireless connectivity drops

SIEM Query:

wireless AND (crash OR reboot OR panic) AND (qualcomm OR wifi)

📊 Metadata

CVE ID: CVE-2024-33051

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-126

Published: September 2, 2024

Last Updated: August 11, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

315 5g Iot Firmware by Qualcomm

9206 Lte Firmware by Qualcomm

Apq8017 Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8031 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Firmware by Qualcomm

Home Hub 100 Firmware by Qualcomm

Mdm8215 Firmware by Qualcomm

Mdm9215 Firmware by Qualcomm

Mdm9250 Firmware by Qualcomm

Mdm9310 Firmware by Qualcomm

Mdm9615 Firmware by Qualcomm

Mdm9628 Firmware by Qualcomm

Mdm9640 Firmware by Qualcomm

Mdm9645 Firmware by Qualcomm

Mdm9650 Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca1062 Firmware by Qualcomm

Qca1064 Firmware by Qualcomm

Qca2062 Firmware by Qualcomm

Qca2064 Firmware by Qualcomm

Qca2065 Firmware by Qualcomm

Qca2066 Firmware by Qualcomm

Qca6174 Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6175a Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6320 Firmware by Qualcomm

Qca6335 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6431 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564 Firmware by Qualcomm

Qca6564a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584 Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca9367 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qca9378 Firmware by Qualcomm

Qca9379 Firmware by Qualcomm

Qca9984 Firmware by Qualcomm

Qcc2073 Firmware by Qualcomm

Qcc2076 Firmware by Qualcomm