CVE-2024-49840

🗓️ 03 Feb 2025 16:51:40Reported by qualcommType

Memory corruption due to out-of-range pointer offset in WLAN Windows Host affecting FIPS functionality.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-49840	3 Feb 202517:17	–	circl
CNNVD	Qualcomm Chipsets 安全漏洞	3 Feb 202500:00	–	cnnvd
Cvelist	CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host	3 Feb 202516:51	–	cvelist
EUVD	EUVD-2024-43565	3 Oct 202520:07	–	euvd
NVD	CVE-2024-49840	3 Feb 202517:15	–	nvd
RedhatCVE	CVE-2024-49840	7 Feb 202509:46	–	redhatcve
Vulnrichment	CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host	3 Feb 202516:51	–	vulnrichment

NVD

Node

qualcomm fastconnect_6900_firmwareMatch-

AND

qualcomm fastconnect_6900Match-

Node

qualcomm fastconnect_7800_firmwareMatch-

AND

qualcomm fastconnect_7800Match-

Node

qualcomm qcc2073_firmwareMatch-

AND

qualcomm qcc2073Match-

Node

qualcomm qcc2076_firmwareMatch-

AND

qualcomm qcc2076Match-

Node

qualcomm sc8380xp_firmwareMatch-

AND

qualcomm sc8380xpMatch-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcd9385_firmwareMatch-

AND

qualcomm wcd9385Match-

Node

qualcomm wsa8840_firmwareMatch-

AND

qualcomm wsa8840Match-

Node

qualcomm wsa8845_firmwareMatch-

AND

qualcomm wsa8845Match-

Node

qualcomm wsa8845h_firmwareMatch-

AND

qualcomm wsa8845hMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Compute",
      "Snapdragon Connectivity",
      "Snapdragon Consumer Electronics Connectivity"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QCC2073"
      },
      {
        "status": "affected",
        "version": "QCC2076"
      },
      {
        "status": "affected",
        "version": "SC8380XP"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html

05 Feb 2025 16:02Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.00099

SSVC