CVE-2024-23358

Buffer Over-read in Multi Mode Call Processor

State: Published
Severity: 7.5 High
Published: Sep 2, 2024
Updated: Sep 3, 2024
Reserved: Jan 16, 2024

Description

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	APQ8017Affected APQ8037Affected AR8035Affected FastConnect 7800Affected MSM8108Affected MSM8209Affected MSM8608Affected QCA6584AUAffected QCA6698AQAffected QCA8081Affected QCA8337Affected QCC710Affected QCN6224Affected QCN6274Affected QFW7114Affected QFW7124Affected Qualcomm 205 Mobile PlatformAffected SDM429WAffected SM8635Affected Smart Audio 200 PlatformAffected Snapdragon 208 ProcessorAffected Snapdragon 210 ProcessorAffected Snapdragon 212 Mobile PlatformAffected Snapdragon 425 Mobile PlatformAffected Snapdragon 429 Mobile PlatformAffected and 28 more versions

Product

Versions

SnapdragonQualcomm, Inc.

APQ8017Affected
APQ8037Affected
AR8035Affected
FastConnect 7800Affected
MSM8108Affected
MSM8209Affected
MSM8608Affected
QCA6584AUAffected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
QCC710Affected
QCN6224Affected
QCN6274Affected
QFW7114Affected
QFW7124Affected
Qualcomm 205 Mobile PlatformAffected
SDM429WAffected
SM8635Affected
Smart Audio 200 PlatformAffected
Snapdragon 208 ProcessorAffected
Snapdragon 210 ProcessorAffected
Snapdragon 212 Mobile PlatformAffected
Snapdragon 425 Mobile PlatformAffected
Snapdragon 429 Mobile PlatformAffected
and 28 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.