CVE-2024-33063 Overview
CVE-2024-33063 is a transient denial-of-service (DoS) vulnerability affecting Qualcomm Wi-Fi firmware across a broad range of mobile, automotive, networking, and IoT chipsets. The flaw resides in the parsing logic for the Multi-Link (ML) Information Element (IE) within IEEE 802.11 beacon frames. When a beacon contains a common info length value larger than the enclosing ML IE itself, the parser misbehaves, producing a transient DoS condition on the wireless subsystem. The weakness maps to [CWE-190: Integer Overflow or Wraparound]. Qualcomm disclosed and patched the issue in the December 2024 Security Bulletin.
Critical Impact
A remote attacker within wireless range can send a malformed Wi-Fi beacon to crash or disrupt the wireless stack on affected Qualcomm devices, with no authentication or user interaction required.
Affected Products
- Qualcomm FastConnect 6900 and FastConnect 7800 Wi-Fi subsystems
- Snapdragon 8 Gen 2, Snapdragon 8 Gen 3, and Snapdragon 8+ Gen 2 Mobile Platforms
- Qualcomm automotive, IPQ, QCA, QCN, WCN, and WSA family firmware (full CPE list in the Qualcomm advisory)
Discovery Timeline
- 2024-12-02 - CVE-2024-33063 published to NVD
- December 2024 - Qualcomm releases security patch via the December 2024 Security Bulletin
- 2024-12-12 - Last updated in NVD database
Technical Details for CVE-2024-33063
Vulnerability Analysis
The vulnerability exists in the Wi-Fi driver code that parses the Multi-Link Information Element introduced for IEEE 802.11be (Wi-Fi 7) multi-link operation. The ML IE carries a common_info_length field that describes the size of the common info subfield. The parser uses this length to advance pointers and read additional fields. When a crafted beacon advertises a common_info_length larger than the total length of the containing ML IE, arithmetic on the length values produces an unexpected result. This leads the parser to read or process memory beyond the element boundary, causing the wireless firmware or driver thread to fault. The result is a transient DoS — typically a crash and restart of the Wi-Fi subsystem.
Root Cause
The root cause is missing validation that common_info_length is less than or equal to the parent ML IE length, combined with integer arithmetic that does not safely handle the inverted size relationship [CWE-190]. The parser trusts attacker-controlled length fields from a broadcast beacon.
Attack Vector
Exploitation requires only proximity to the target. An attacker broadcasts a malformed 802.11 beacon containing an ML IE with an inflated common info length. Any vulnerable device scanning for or receiving the beacon attempts to parse it and triggers the fault. No association, authentication, or user interaction is needed.
// No verified exploit code is publicly available for this vulnerability.
// Refer to the Qualcomm December 2024 Security Bulletin for technical specifics.
Detection Methods for CVE-2024-33063
Indicators of Compromise
- Repeated, unexplained Wi-Fi subsystem crashes or driver resets on Qualcomm-based devices in a specific physical location
- Kernel or HLOS logs referencing ML IE parsing errors, beacon parse failures, or wlan driver panics
- Presence of unknown access points broadcasting beacons with malformed Multi-Link Information Elements
Detection Strategies
- Capture 802.11 management frames with a monitor-mode adapter and inspect ML IE length fields for inconsistencies between common_info_length and the parent IE length
- Correlate Wi-Fi driver crash telemetry across fleet devices to identify clusters indicative of a malicious beacon source
- Use wireless intrusion detection systems (WIDS) to flag rogue APs broadcasting non-compliant Multi-Link Element structures
Monitoring Recommendations
- Enable verbose Wi-Fi driver logging on managed mobile and IoT endpoints to capture parser-level errors
- Track device crash reports and Wi-Fi service restart counts in endpoint management consoles
- Monitor for new or unauthorized access points in proximity to sensitive facilities
How to Mitigate CVE-2024-33063
Immediate Actions Required
- Apply the firmware updates referenced in the Qualcomm December 2024 Security Bulletin as soon as OEM-delivered patches are available
- Coordinate with device OEMs (mobile, automotive, networking) to confirm patch availability for the specific chipset variants in use
- Inventory devices using affected Qualcomm chipsets, including FastConnect, Snapdragon, QCA, QCN, WCN, and IPQ families
Patch Information
Qualcomm published fixes for CVE-2024-33063 in the Qualcomm December 2024 Security Bulletin. Patches must be integrated and distributed by downstream OEMs, so update availability depends on the device manufacturer.
Workarounds
- Disable Wi-Fi on affected devices in high-risk environments until the OEM firmware update is installed
- Restrict device operation to trusted wireless environments and avoid associating with or scanning in untrusted RF spaces
- Where feasible, disable Wi-Fi 7 / Multi-Link Operation features until patched firmware is deployed
# Example: temporarily disable Wi-Fi on an Android device via ADB
adb shell svc wifi disable
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
