CVE-2024-23350 - Vulnerability Details

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00101.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
`AR8035`	affected	—
`FastConnect 6900`	affected	—
`FastConnect 7800`	affected	—
`QCA6174A`	affected	—
`QCA6584AU`	affected	—
`QCA6698AQ`	affected	—
`QCA8081`	affected	—
`QCA8337`	affected	—
`QCC710`	affected	—
`QCN6224`	affected	—
`QCN6274`	affected	—
`QEP8111`	affected	—
`QFW7114`	affected	—
`QFW7124`	affected	—
`Snapdragon 8 Gen 3 Mobile Platform`	affected	—
`Snapdragon Auto 5G Modem-RF Gen 2`	affected	—
`Snapdragon X35 5G Modem-RF System`	affected	—
`Snapdragon X72 5G Modem-RF System`	affected	—
`Snapdragon X75 5G Modem-RF System`	affected	—
`WCD9340`	affected	—
`WCD9390`	affected	—
`WCD9395`	affected	—
`WSA8840`	affected	—
`WSA8845`	affected	—
`WSA8845H`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_x35_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:qualcomm:qep8111_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qep8111:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Qualcomm Subscribe	Ar8035 Subscribe Ar8035 Firmware Subscribe Fastconnect 6900 Subscribe Fastconnect 6900 Firmware Subscribe Fastconnect 7800 Subscribe Fastconnect 7800 Firmware Subscribe Qca6174a Subscribe Qca6174a Firmware Subscribe Qca6584au Subscribe Qca6584au Firmware Subscribe Qca6698aq Subscribe Qca6698aq Firmware Subscribe Qca8081 Subscribe Qca8081 Firmware Subscribe Qca8337 Subscribe Qca8337 Firmware Subscribe Qcc710 Subscribe Qcc710 Firmware Subscribe Qcn6224 Subscribe Qcn6224 Firmware Subscribe Qcn6274 Subscribe Qcn6274 Firmware Subscribe Qep8111 Subscribe Qep8111 Firmware Subscribe Qfw7114 Subscribe Qfw7114 Firmware Subscribe Qfw7124 Subscribe Qfw7124 Firmware Subscribe Snapdragon 8 Gen 3 Mobile Platform Subscribe Snapdragon 8 Gen 3 Mobile Platform Firmware Subscribe Snapdragon Auto 5g Modem-rf Gen 2 Subscribe Snapdragon Auto 5g Modem-rf Gen 2 Firmware Subscribe Snapdragon X35 5g Modem-rf System Subscribe Snapdragon X35 5g Modem-rf System Firmware Subscribe Snapdragon X72 5g Modem-rf System Subscribe Snapdragon X72 5g Modem-rf System Firmware Subscribe Snapdragon X75 5g Modem-rf System Subscribe Snapdragon X75 5g Modem-rf System Firmware Subscribe Wcd9340 Subscribe Wcd9340 Firmware Subscribe Wcd9390 Subscribe Wcd9390 Firmware Subscribe Wcd9395 Subscribe Wcd9395 Firmware Subscribe Wsa8840 Subscribe Wsa8840 Firmware Subscribe Wsa8845 Subscribe Wsa8845 Firmware Subscribe Wsa8845h Subscribe Wsa8845h Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2024-20854	Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

History

Tue, 26 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qualcomm ar8035 Qualcomm fastconnect 6900 Qualcomm fastconnect 7800 Qualcomm qca6174a Qualcomm qca6584au Qualcomm qca6698aq Qualcomm qca8081 Qualcomm qca8337 Qualcomm qcc710 Qualcomm qcn6224 Qualcomm qcn6274 Qualcomm qep8111 Qualcomm qfw7114 Qualcomm qfw7124 Qualcomm snapdragon 8 Gen 3 Mobile Platform Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon X35 5g Modem-rf System Qualcomm snapdragon X72 5g Modem-rf System Qualcomm snapdragon X75 5g Modem-rf System Qualcomm wcd9340 Qualcomm wcd9390 Qualcomm wcd9395 Qualcomm wsa8840 Qualcomm wsa8845 Qualcomm wsa8845h
CPEs		cpe:2.3:h:qualcomm:ar8035:-:::::::* cpe:2.3:h:qualcomm:fastconnect_6900:-:::::::* cpe:2.3:h:qualcomm:fastconnect_7800:-:::::::* cpe:2.3:h:qualcomm:qca6174a:-:::::::* cpe:2.3:h:qualcomm:qca6584au:-:::::::* cpe:2.3:h:qualcomm:qca6698aq:-:::::::* cpe:2.3:h:qualcomm:qca8081:-:::::::* cpe:2.3:h:qualcomm:qca8337:-:::::::* cpe:2.3:h:qualcomm:qcc710:-:::::::* cpe:2.3:h:qualcomm:qcn6224:-:::::::* cpe:2.3:h:qualcomm:qcn6274:-:::::::* cpe:2.3:h:qualcomm:qep8111:-:::::::* cpe:2.3:h:qualcomm:qfw7114:-:::::::* cpe:2.3:h:qualcomm:qfw7124:-:::::::* cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:::::::* cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x35_5g_modem-rf_system:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:::::::* cpe:2.3:h:qualcomm:wcd9340:-:::::::* cpe:2.3:h:qualcomm:wcd9390:-:::::::* cpe:2.3:h:qualcomm:wcd9395:-:::::::* cpe:2.3:h:qualcomm:wsa8840:-:::::::* cpe:2.3:h:qualcomm:wsa8845:-:::::::* cpe:2.3:h:qualcomm:wsa8845h:-:::::::*
Vendors & Products		Qualcomm ar8035 Qualcomm fastconnect 6900 Qualcomm fastconnect 7800 Qualcomm qca6174a Qualcomm qca6584au Qualcomm qca6698aq Qualcomm qca8081 Qualcomm qca8337 Qualcomm qcc710 Qualcomm qcn6224 Qualcomm qcn6274 Qualcomm qep8111 Qualcomm qfw7114 Qualcomm qfw7124 Qualcomm snapdragon 8 Gen 3 Mobile Platform Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon X35 5g Modem-rf System Qualcomm snapdragon X72 5g Modem-rf System Qualcomm snapdragon X75 5g Modem-rf System Qualcomm wcd9340 Qualcomm wcd9390 Qualcomm wcd9395 Qualcomm wsa8840 Qualcomm wsa8845 Qualcomm wsa8845h

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-08-05T14:21:18.555Z

Updated: 2024-08-05T15:02:35.350Z

Reserved: 2024-01-16T03:27:26.430Z

Link: CVE-2024-23350

Vulnrichment

Updated: 2024-08-05T15:02:05.796Z

NVD

Status : Analyzed

Published: 2024-08-05T15:15:45.960

Modified: 2024-11-26T15:48:05.817

Link: CVE-2024-23350

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-617

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object