6.5

CVE-2024-23350

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wcd9395 Firmware Version-
   Qualcomm ≫ Wcd9395 Version-
Qualcomm ≫ Wcd9390 Firmware Version-
   Qualcomm ≫ Wcd9390 Version-
Qualcomm ≫ Wcd9340 Firmware Version-
   Qualcomm ≫ Wcd9340 Version-
Qualcomm ≫ Qfw7124 Firmware Version-
   Qualcomm ≫ Qfw7124 Version-
Qualcomm ≫ Qfw7114 Firmware Version-
   Qualcomm ≫ Qfw7114 Version-
Qualcomm ≫ Qep8111 Firmware Version-
   Qualcomm ≫ Qep8111 Version-
Qualcomm ≫ Qcn6274 Firmware Version-
   Qualcomm ≫ Qcn6274 Version-
Qualcomm ≫ Qcn6224 Firmware Version-
   Qualcomm ≫ Qcn6224 Version-
Qualcomm ≫ Qcc710 Firmware Version-
   Qualcomm ≫ Qcc710 Version-
Qualcomm ≫ Qca8337 Firmware Version-
   Qualcomm ≫ Qca8337 Version-
Qualcomm ≫ Qca8081 Firmware Version-
   Qualcomm ≫ Qca8081 Version-
Qualcomm ≫ Qca6698aq Firmware Version-
   Qualcomm ≫ Qca6698aq Version-
Qualcomm ≫ Qca6584au Firmware Version-
   Qualcomm ≫ Qca6584au Version-
Qualcomm ≫ Qca6174a Firmware Version-
   Qualcomm ≫ Qca6174a Version-
Qualcomm ≫ Ar8035 Firmware Version-
   Qualcomm ≫ Ar8035 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.119
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.