CVE-2024-23350
Medium
Description
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Qualcomm Wsa8845h Firmware
PublishedAug 5, 2024
First seenAug 5, 2024
Weakness typeCWE-617CWE-617
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm wsa8845h_firmware | No range specified | — |
| qualcomm wsa8845_firmware | No range specified | — |
| qualcomm wsa8840_firmware | No range specified | — |
| qualcomm wcd9395_firmware | No range specified | — |
| qualcomm wcd9390_firmware | No range specified | — |
| qualcomm wcd9340_firmware | No range specified | — |
| qualcomm snapdragon_x75_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_x72_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_x35_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm qfw7124_firmware | No range specified | — |
| qualcomm qfw7114_firmware | No range specified | — |
| qualcomm qep8111_firmware | No range specified | — |
| qualcomm qcn6274_firmware | No range specified | — |
| qualcomm qcn6224_firmware | No range specified | — |
| qualcomm qcc710_firmware | No range specified | — |
| qualcomm qca8337_firmware | No range specified | — |
| qualcomm qca8081_firmware | No range specified | — |
| qualcomm qca6698aq_firmware | No range specified | — |
| qualcomm qca6584au_firmware | No range specified | — |
| qualcomm qca6174a_firmware | No range specified | — |
| qualcomm fastconnect_7800_firmware | No range specified | — |
| qualcomm fastconnect_6900_firmware | No range specified | — |
| qualcomm ar8035_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.