cd ../projects

CVE-2023-33105

Published Qualcomm WLAN research: transient denial-of-service in WLAN host/firmware triggered by malformed authentication-frame behavior.

published

CVE-2023-33105 is a public record from earlier wireless and firmware research: a transient denial-of-service condition in Qualcomm WLAN host and firmware behavior. The public advisory describes the issue as availability-impacting behavior triggered by a large number of open authentication frames with an invalid transaction sequence number.

The proof-of-concept is an early Python research artifact: small, direct, and focused on validating the protocol behavior. The useful part is the path from frame-level observation to reproducible lab validation to a public CVE record.

It stays visible because it says something different from the larger platforms: hands-on wireless research, frame-level testing, and enough discipline to turn a finding into an externally trackable vulnerability.

The public code is provided for authorized research and lab validation only.

cat redacted-results.log sanitized logs

Advisory record

public CVE

The public record ties the issue to Qualcomm WLAN host and firmware behavior.

sanitized-output
cve: CVE-2023-33105
vendor: Qualcomm
class: transient denial-of-service
area: WLAN host and firmware
cvss_v3_1: 7.5 HIGH
vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
publication: Qualcomm March 2024 bulletin / NVD

Research artifact

public research artifact

Early Python proof-of-concept kept available for lab validation and traceability.

sanitized-output
language: Python
dependencies: scapy, termcolor, wireless injection tooling
scope: authorized lab validation only
target_data: not included
operational_status: archived public research