PT-2024-19843 · Qualcomm · Qualcomm Snapdragon Auto

Published 2024-09-02 · Updated 2025-10-03 · CVE-2024-23364

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions up to XR2+ Gen 1

Description A transient Denial of Service (DOS) can occur when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA). This issue is related to the handling of beacon frames, specifically the MBSSID Information Element.

Recommendations For Qualcomm Snapdragon Auto versions up to XR2+ Gen 1, upgrade the affected components immediately to mitigate threats. As a temporary workaround, consider restricting the handling of non-transmitted BSSID profile sub-elements within the MBSSID Information Element of beacon frames until a patch is available.

Fix

DoS

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2024-23364

Affected Products

Qualcomm Snapdragon Auto

References · 9

• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23364 · Security Note
• https://twitter.com/oktsec/status/1830580023968878701 · Twitter Post
• https://t.me/cveNotify/137354 · Telegram Post
• https://twitter.com/CVEnew/status/1830559203754483953 · Twitter Post
• https://twitter.com/cracbot/status/1830848248611045441 · Twitter Post
• https://t.me/cvedetector/4624 · Telegram Post
• https://t.me/cvenotify/92994 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1830632527893069947 · Twitter Post