CVE-2024-49839

CVE-2024-49839 is a memory corruption vulnerability stemming from a mismatch in the T2LM information element during management frame processing. It affects components in Qualcomm products, as detailed in their security bulletin. The issue is associated with CWE-126 (Buffer Over-read) and CWE-125 (Out-of-bounds Read), earning a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L), indicating high severity due to its network accessibility and potential for significant confidentiality impact.

A remote, unauthenticated attacker can exploit this vulnerability by sending crafted management frames over the network with low complexity and no user interaction required. Successful exploitation could result in high-impact confidentiality violations, such as disclosure of sensitive information through memory corruption, alongside a low-impact availability disruption, potentially enabling denial-of-service conditions.

Qualcomm's February 2025 security bulletin at https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html provides details on affected products and recommended mitigations or patches.