CVE-2024-38404

Buffer Over-read in Multi Mode Call Processor

State: Published
Severity: 7.5 High
Published: Feb 3, 2025
Updated: Feb 3, 2025
Reserved: Jun 16, 2024

Description

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 7800Affected QCA6584AUAffected QCA6698AQAffected QCA8081Affected QCA8337Affected QCC710Affected QCN6224Affected QCN6274Affected QFW7114Affected QFW7124Affected SDM429WAffected SDX80MAffected SM7675Affected SM7675PAffected SM8635Affected SM8635PAffected Snapdragon 429 Mobile PlatformAffected Snapdragon 8 Gen 3 Mobile PlatformAffected Snapdragon Auto 5G Modem-RF Gen 2Affected Snapdragon Wear 4100+ PlatformAffected Snapdragon X72 5G Modem-RF SystemAffected Snapdragon X75 5G Modem-RF SystemAffected WCD9340Affected WCD9370Affected and 15 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 7800Affected
QCA6584AUAffected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
QCC710Affected
QCN6224Affected
QCN6274Affected
QFW7114Affected
QFW7124Affected
SDM429WAffected
SDX80MAffected
SM7675Affected
SM7675PAffected
SM8635Affected
SM8635PAffected
Snapdragon 429 Mobile PlatformAffected
Snapdragon 8 Gen 3 Mobile PlatformAffected
Snapdragon Auto 5G Modem-RF Gen 2Affected
Snapdragon Wear 4100+ PlatformAffected
Snapdragon X72 5G Modem-RF SystemAffected
Snapdragon X75 5G Modem-RF SystemAffected
WCD9340Affected
WCD9370Affected
and 15 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.