What’s Vulnerable › Vulnerabilities

CVE-2024-23358: Buffer Over-read in Multi Mode Call Processor

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-02 · updated 2026-06-17
• Weakness: CWE-126

Description

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

Affected products

• Qualcomm 205 Mobile Platform Firmware: all versions
• Qualcomm Apq8017 Firmware: all versions
• Qualcomm Apq8037 Firmware: all versions
• Qualcomm Ar8035 Firmware: all versions
• Qualcomm Fastconnect 7800 Firmware: all versions
• Qualcomm Msm8108 Firmware: all versions
• Qualcomm Msm8209 Firmware: all versions
• Qualcomm Msm8608 Firmware: all versions
• Qualcomm Qca6584Au Firmware: all versions
• Qualcomm Qca6698Aq Firmware: all versions
• Qualcomm Qca8081 Firmware: all versions
• Qualcomm Qca8337 Firmware: all versions
• Qualcomm Qcc710 Firmware: all versions
• Qualcomm Qcn6224 Firmware: all versions
• Qualcomm Qcn6274 Firmware: all versions
• Qualcomm Qfw7114 Firmware: all versions
• Qualcomm Qfw7124 Firmware: all versions
• Qualcomm Sdm429W Firmware: all versions
• Qualcomm Sm8635 Firmware: all versions
• Qualcomm Smart Audio 200 Platform Firmware: all versions
• Qualcomm Snapdragon 208 Processor Firmware: all versions
• Qualcomm Snapdragon 210 Processor Firmware: all versions
• Qualcomm Snapdragon 212 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 425 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 429 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 430 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 439 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon Auto 5G Modem-Rf Gen 2 Firmware: all versions
• Qualcomm Snapdragon Wear 4100+ Platform Firmware: all versions

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html

Get alerted when CVE-2024-23358 or the next vulnerability affects your stack