CVE-2024-49847

Buffer Over-read in Multi-Mode Call Processor

State: Published
Severity: 7.5 High
Published: May 6, 2025
Updated: May 6, 2025
Reserved: Oct 20, 2024

Description

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 7800Affected QCA6574AUAffected QCA6584AUAffected QCA6595AUAffected QCA6678AQAffected QCA6688AQAffected QCA6698AQAffected QCA8081Affected QCA8337Affected QCC710Affected QCN6224Affected QCN6274Affected QFW7114Affected QFW7124Affected SDM429WAffected SDX80MAffected SM7675Affected SM7675PAffected SM8635Affected SM8635PAffected SM8650QAffected SM8750Affected SM8750PAffected Snapdragon 429 Mobile PlatformAffected and 22 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 7800Affected
QCA6574AUAffected
QCA6584AUAffected
QCA6595AUAffected
QCA6678AQAffected
QCA6688AQAffected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
QCC710Affected
QCN6224Affected
QCN6274Affected
QFW7114Affected
QFW7124Affected
SDM429WAffected
SDX80MAffected
SM7675Affected
SM7675PAffected
SM8635Affected
SM8635PAffected
SM8650QAffected
SM8750Affected
SM8750PAffected
Snapdragon 429 Mobile PlatformAffected
and 22 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.