What’s Vulnerable › Vulnerabilities

CVE-2024-23350: Reachable Assertion in Multi Mode Call Processor

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-05 · updated 2026-06-17
• Weakness: CWE-617

Description

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

Affected products

• Qualcomm Ar8035 Firmware: all versions
• Qualcomm Fastconnect 6900 Firmware: all versions
• Qualcomm Fastconnect 7800 Firmware: all versions
• Qualcomm Qca6174A Firmware: all versions
• Qualcomm Qca6584Au Firmware: all versions
• Qualcomm Qca6698Aq Firmware: all versions
• Qualcomm Qca8081 Firmware: all versions
• Qualcomm Qca8337 Firmware: all versions
• Qualcomm Qcc710 Firmware: all versions
• Qualcomm Qcn6224 Firmware: all versions
• Qualcomm Qcn6274 Firmware: all versions
• Qualcomm Qep8111 Firmware: all versions
• Qualcomm Qfw7114 Firmware: all versions
• Qualcomm Qfw7124 Firmware: all versions
• Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon Auto 5G Modem-Rf Gen 2 Firmware: all versions
• Qualcomm Snapdragon X35 5G Modem-Rf System Firmware: all versions
• Qualcomm Snapdragon X72 5G Modem-Rf System Firmware: all versions
• Qualcomm Snapdragon X75 5G Modem-Rf System Firmware: all versions
• Qualcomm Wcd9340 Firmware: all versions
• Qualcomm Wcd9390 Firmware: all versions
• Qualcomm Wcd9395 Firmware: all versions
• Qualcomm Wsa8840 Firmware: all versions
• Qualcomm Wsa8845 Firmware: all versions
• Qualcomm Wsa8845H Firmware: all versions

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

Get alerted when CVE-2024-23350 or the next vulnerability affects your stack