PT-2024-27983 · Qualcomm · Snapdragon+72

Published 2024-11-04 · Updated 2024-11-07 · CVE-2024-38403

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue is related to a transient denial of service (DOS) that occurs when parsing BTM ML IE and the per STA profile is not included. This can cause a temporary disruption in service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

CVE-2024-38403

Affected Products

Snapdragon

Ar8035 Firmware

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Qam8255P Firmware

Qam8650P Firmware

Qam8775P Firmware

Qca6554A Firmware

Qca6564Au Firmware

Qca6574Au Firmware

Qca6584Au Firmware

Qca6595Au Firmware

Qca6696 Firmware

Qca6698Aq Firmware

Qca6777Aq Firmware

Qca6787Aq Firmware

Qca6797Aq Firmware

Qca8081 Firmware

Qca8337 Firmware

Qcc2073 Firmware

Qcc2076 Firmware

Qcc710 Firmware

Qcs8550 Firmware

Qcn6224 Firmware

Qcn6274 Firmware

Qfw7114 Firmware

Qfw7124 Firmware

Sa7255P Firmware

Sa7775P Firmware

Sa8255P Firmware

Sa8620P Firmware

Sa8650P Firmware

Sa8775P Firmware

Sa9000P Firmware

Sc8380Xp Firmware

Sdm429W Firmware

Sm8550P Firmware

Sm8635 Firmware

Sm8750 Firmware

Snapdragon 429 Mobile Platform Firmware

Snapdragon 8 Gen 2 Mobile Platform Firmware

Snapdragon 8 Gen 3 Mobile Platform Firmware

Snapdragon Ar2 Gen 1 Platform Firmware

Snapdragon Wear 4100+ Platform Firmware

Snapdragon X72 5G Modem-Rf System Firmware

Snapdragon X75 5G Modem-Rf System Firmware

Ssg2115P Firmware

Ssg2125P Firmware

Sxr1230P Firmware

Sxr2230P Firmware

Sxr2250P Firmware

Wcd9340 Firmware

Wcd9370 Firmware

Wcd9375 Firmware

Wcd9380 Firmware

Wcd9385 Firmware

Wcd9390 Firmware

Wcd9395 Firmware

Wcn3610 Firmware

Wcn3620 Firmware

Wcn3660B Firmware

Wcn3680B Firmware

Wcn3980 Firmware

Wcn6755 Firmware

Wcn7860 Firmware

Wcn7861 Firmware

Wcn7880 Firmware

Wcn7881 Firmware

Wsa8830 Firmware

Wsa8832 Firmware

Wsa8835 Firmware

Wsa8840 Firmware

Wsa8845 Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-38403 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1853425760687608098 · Twitter Post
• https://t.me/cvedetector/9713 · Telegram Post
• https://twitter.com/CVEnew/status/1853381317645434927 · Twitter Post
• https://t.me/cvenotify/100476 · Telegram Post
• https://t.me/cvenotify/100984 · Telegram Post