CVE-2024-33013
Published: 05 August 2024
Summary
CVE-2024-33013 is a high-severity Buffer Over-read (CWE-126) vulnerability in Qualcomm Wsa8845H Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 45.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-30758
Vulnerability details
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a transient DoS vulnerability in a driver triggered by accessing memory beyond ML IE length bounds, enabling endpoint denial of service through system exploitation.
MITRE ATLAS TechniquesAI
MITRE ATLAS techniques
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.