PT-2024-18878 · Qualcomm · Snapdragon+28

Published 2024-04-01 · Updated 2025-01-13 · CVE-2024-21453

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue is related to a transient Denial of Service (DOS) that occurs when decoding a message of a size that exceeds the available system memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2024-21453

Affected Products

Snapdragon

C-V2X 9150

C-V2X 9150 Firmware

Qcs410

Qcs410 Firmware

Qcs610

Qcs610 Firmware

Snapdragon Auto 4G Modem

Snapdragon Auto 4G Modem Firmware

Snapdragon Auto 5G Modem-Rf

Snapdragon Auto 5G Modem-Rf Firmware

Video Collaboration Vc1

Video Collaboration Vc1 Firmware

Video Collaboration Vc1 Platform Firmware

Video Collaboration Vc3

Video Collaboration Vc3 Firmware

Video Collaboration Vc3 Platform Firmware

Wcd9341

Wcd9341 Firmware

Wcd9370

Wcd9370 Firmware

Wcn3950

Wcn3950 Firmware

Wcn3980

Wcn3980 Firmware

Wsa8810

Wsa8810 Firmware

Wsa8815

Wsa8815 Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-21453 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html · Vendor Advisory
• https://t.me/cvenotify/76538 · Telegram Post
• https://t.me/cvenotify/107247 · Telegram Post
• https://twitter.com/cracbot/status/1775342044354884002 · Twitter Post