7.5

CVE-2024-49847

Buffer Over-read in Multi-Mode Call Processor

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ar8035 Firmware Version -
   Qualcomm ≫ Ar8035 Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
   Qualcomm ≫ Fastconnect 7800 Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6678aq Firmware Version -
   Qualcomm ≫ Qca6678aq Version -
Qualcomm ≫ Qca6688aq Firmware Version -
   Qualcomm ≫ Qca6688aq Version -
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq Version -
Qualcomm ≫ Qca8081 Firmware Version -
   Qualcomm ≫ Qca8081 Version -
Qualcomm ≫ Qca8337 Firmware Version -
   Qualcomm ≫ Qca8337 Version -
Qualcomm ≫ Qcc710 Firmware Version -
   Qualcomm ≫ Qcc710 Version -
Qualcomm ≫ Qcn6224 Firmware Version -
   Qualcomm ≫ Qcn6224 Version -
Qualcomm ≫ Qcn6274 Firmware Version -
   Qualcomm ≫ Qcn6274 Version -
Qualcomm ≫ Qfw7114 Firmware Version -
   Qualcomm ≫ Qfw7114 Version -
Qualcomm ≫ Qfw7124 Firmware Version -
   Qualcomm ≫ Qfw7124 Version -
Qualcomm ≫ Sdm429w Firmware Version -
   Qualcomm ≫ Sdm429w Version -
Qualcomm ≫ Sdx80m Firmware Version -
   Qualcomm ≫ Sdx80m Version -
Qualcomm ≫ Sm7675 Firmware Version -
   Qualcomm ≫ Sm7675 Version -
Qualcomm ≫ Sm7675p Firmware Version -
   Qualcomm ≫ Sm7675p Version -
Qualcomm ≫ Sm8635 Firmware Version -
   Qualcomm ≫ Sm8635 Version -
Qualcomm ≫ Sm8635p Firmware Version -
   Qualcomm ≫ Sm8635p Version -
Qualcomm ≫ Sm8650q Firmware Version -
   Qualcomm ≫ Sm8650q Version -
Qualcomm ≫ Sm8750 Firmware Version -
   Qualcomm ≫ Sm8750 Version -
Qualcomm ≫ Sm8750p Firmware Version -
   Qualcomm ≫ Sm8750p Version -
Qualcomm ≫ Wcd9340 Firmware Version -
   Qualcomm ≫ Wcd9340 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9375 Firmware Version -
   Qualcomm ≫ Wcd9375 Version -
Qualcomm ≫ Wcd9390 Firmware Version -
   Qualcomm ≫ Wcd9390 Version -
Qualcomm ≫ Wcd9395 Firmware Version -
   Qualcomm ≫ Wcd9395 Version -
Qualcomm ≫ Wcn3610 Firmware Version -
   Qualcomm ≫ Wcn3610 Version -
Qualcomm ≫ Wcn3620 Firmware Version -
   Qualcomm ≫ Wcn3620 Version -
Qualcomm ≫ Wcn3660b Firmware Version -
   Qualcomm ≫ Wcn3660b Version -
Qualcomm ≫ Wcn3680b Firmware Version -
   Qualcomm ≫ Wcn3680b Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn6755 Firmware Version -
   Qualcomm ≫ Wcn6755 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8832 Firmware Version -
   Qualcomm ≫ Wsa8832 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Qualcomm ≫ Wsa8840 Firmware Version -
   Qualcomm ≫ Wsa8840 Version -
Qualcomm ≫ Wsa8845 Firmware Version -
   Qualcomm ≫ Wsa8845 Version -
Qualcomm ≫ Wsa8845h Firmware Version -
   Qualcomm ≫ Wsa8845h Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.16
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
Vendor Advisory