CVE-2024-38403

Nov. 7, 2024, 8:06 p.m.

7.5
High

Description

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Product(s) Impacted

Vendor Product Versions
Qualcomm
  • Wsa8845h Firmware
  • Wsa8845h
  • Wsa8845 Firmware
  • Wsa8845
  • Wsa8840 Firmware
  • Wsa8840
  • Wsa8835 Firmware
  • Wsa8835
  • Wsa8832 Firmware
  • Wsa8832
  • Wsa8830 Firmware
  • Wsa8830
  • Wcn7881 Firmware
  • Wcn7881
  • Wcn7880 Firmware
  • Wcn7880
  • Wcn7861 Firmware
  • Wcn7861
  • Wcn7860 Firmware
  • Wcn7860
  • Wcn6755 Firmware
  • Wcn6755
  • Wcn3980 Firmware
  • Wcn3980
  • Wcn3680b Firmware
  • Wcn3680b
  • Wcn3660b Firmware
  • Wcn3660b
  • Wcn3620 Firmware
  • Wcn3620
  • Wcn3610 Firmware
  • Wcn3610
  • Wcd9395 Firmware
  • Wcd9395
  • Wcd9390 Firmware
  • Wcd9390
  • Wcd9385 Firmware
  • Wcd9385
  • Wcd9380 Firmware
  • Wcd9380
  • Wcd9375 Firmware
  • Wcd9375
  • Wcd9370 Firmware
  • Wcd9370
  • Wcd9340 Firmware
  • Wcd9340
  • Sxr2250p Firmware
  • Sxr2250p
  • Sxr2230p Firmware
  • Sxr2230p
  • Sxr1230p Firmware
  • Sxr1230p
  • Ssg2125p Firmware
  • Ssg2125p
  • Ssg2115p Firmware
  • Ssg2115p
  • Snapdragon X75 5g Modem-rf System Firmware
  • Snapdragon X75 5g Modem-rf System
  • Snapdragon X72 5g Modem-rf System Firmware
  • Snapdragon X72 5g Modem-rf System
  • Snapdragon Wear 4100\+ Platform Firmware
  • Snapdragon Wear 4100\+ Platform
  • Snapdragon Ar2 Gen 1 Platform Firmware
  • Snapdragon Ar2 Gen 1 Platform
  • Snapdragon 8\+ Gen 2 Mobile Platform Firmware
  • Snapdragon 8\+ Gen 2 Mobile Platform
  • Snapdragon 8 Gen 3 Mobile Platform Firmware
  • Snapdragon 8 Gen 3 Mobile Platform
  • Snapdragon 8 Gen 2 Mobile Platform Firmware
  • Snapdragon 8 Gen 2 Mobile Platform
  • Snapdragon 429 Mobile Platform Firmware
  • Snapdragon 429 Mobile Platform
  • Sm8750p Firmware
  • Sm8750p
  • Sm8750 Firmware
  • Sm8750
  • Sm8635 Firmware
  • Sm8635
  • Sm8550p Firmware
  • Sm8550p
  • Sdm429w Firmware
  • Sdm429w
  • Sc8380xp Firmware
  • Sc8380xp
  • Sa9000p Firmware
  • Sa9000p
  • Sa8775p Firmware
  • Sa8775p
  • Sa8650p Firmware
  • Sa8650p
  • Sa8620p Firmware
  • Sa8620p
  • Sa8255p Firmware
  • Sa8255p
  • Sa7775p Firmware
  • Sa7775p
  • Sa7255p Firmware
  • Sa7255p
  • Qfw7124 Firmware
  • Qfw7124
  • Qfw7114 Firmware
  • Qfw7114
  • Qcn6274 Firmware
  • Qcn6274
  • Qcn6224 Firmware
  • Qcn6224
  • Qcm8550 Firmware
  • Qcm8550
  • Qcc710 Firmware
  • Qcc710
  • Qcc2076 Firmware
  • Qcc2076
  • Qcc2073 Firmware
  • Qcc2073
  • Qca8337 Firmware
  • Qca8337
  • Qca8081 Firmware
  • Qca8081
  • Qca6797aq Firmware
  • Qca6797aq
  • Qca6787aq Firmware
  • Qca6787aq
  • Qca6777aq Firmware
  • Qca6777aq
  • Qca6698aq Firmware
  • Qca6698aq
  • Qca6696 Firmware
  • Qca6696
  • Qca6595au Firmware
  • Qca6595au
  • Qca6595 Firmware
  • Qca6595
  • Qca6584au Firmware
  • Qca6584au
  • Qca6574au Firmware
  • Qca6574au
  • Qca6574a Firmware
  • Qca6574a
  • Qca6574 Firmware
  • Qca6574
  • Qca6564au Firmware
  • Qca6564au
  • Qca6554a Firmware
  • Qca6554a
  • Qam8775p Firmware
  • Qam8775p
  • Qam8650p Firmware
  • Qam8650p
  • Qam8255p Firmware
  • Qam8255p
  • Fastconnect 7800 Firmware
  • Fastconnect 7800
  • Fastconnect 6900 Firmware
  • Fastconnect 6900
  • Ar8035 Firmware
  • Ar8035
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Weaknesses

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-126
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

*CPE(s)

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm wsa8845h_firmware - / / / / / / /
h qualcomm wsa8845h - / / / / / / /
o qualcomm wsa8845_firmware - / / / / / / /
h qualcomm wsa8845 - / / / / / / /
o qualcomm wsa8840_firmware - / / / / / / /
h qualcomm wsa8840 - / / / / / / /
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /
o qualcomm wsa8832_firmware - / / / / / / /
h qualcomm wsa8832 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wcn7881_firmware - / / / / / / /
h qualcomm wcn7881 - / / / / / / /
o qualcomm wcn7880_firmware - / / / / / / /
h qualcomm wcn7880 - / / / / / / /
o qualcomm wcn7861_firmware - / / / / / / /
h qualcomm wcn7861 - / / / / / / /
o qualcomm wcn7860_firmware - / / / / / / /
h qualcomm wcn7860 - / / / / / / /
o qualcomm wcn6755_firmware - / / / / / / /
h qualcomm wcn6755 - / / / / / / /
o qualcomm wcn3980_firmware - / / / / / / /
h qualcomm wcn3980 - / / / / / / /
o qualcomm wcn3680b_firmware - / / / / / / /
h qualcomm wcn3680b - / / / / / / /
o qualcomm wcn3660b_firmware - / / / / / / /
h qualcomm wcn3660b - / / / / / / /
o qualcomm wcn3620_firmware - / / / / / / /
h qualcomm wcn3620 - / / / / / / /
o qualcomm wcn3610_firmware - / / / / / / /
h qualcomm wcn3610 - / / / / / / /
o qualcomm wcd9395_firmware - / / / / / / /
h qualcomm wcd9395 - / / / / / / /
o qualcomm wcd9390_firmware - / / / / / / /
h qualcomm wcd9390 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9375_firmware - / / / / / / /
h qualcomm wcd9375 - / / / / / / /
o qualcomm wcd9370_firmware - / / / / / / /
h qualcomm wcd9370 - / / / / / / /
o qualcomm wcd9340_firmware - / / / / / / /
h qualcomm wcd9340 - / / / / / / /
o qualcomm sxr2250p_firmware - / / / / / / /
h qualcomm sxr2250p - / / / / / / /
o qualcomm sxr2230p_firmware - / / / / / / /
h qualcomm sxr2230p - / / / / / / /
o qualcomm sxr1230p_firmware - / / / / / / /
h qualcomm sxr1230p - / / / / / / /
o qualcomm ssg2125p_firmware - / / / / / / /
h qualcomm ssg2125p - / / / / / / /
o qualcomm ssg2115p_firmware - / / / / / / /
h qualcomm ssg2115p - / / / / / / /
o qualcomm snapdragon_x75_5g_modem-rf_system_firmware - / / / / / / /
h qualcomm snapdragon_x75_5g_modem-rf_system - / / / / / / /
o qualcomm snapdragon_x72_5g_modem-rf_system_firmware - / / / / / / /
h qualcomm snapdragon_x72_5g_modem-rf_system - / / / / / / /
o qualcomm snapdragon_wear_4100\+_platform_firmware - / / / / / / /
h qualcomm snapdragon_wear_4100\+_platform - / / / / / / /
o qualcomm snapdragon_ar2_gen_1_platform_firmware - / / / / / / /
h qualcomm snapdragon_ar2_gen_1_platform - / / / / / / /
o qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8\+_gen_2_mobile_platform - / / / / / / /
o qualcomm snapdragon_8_gen_3_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_3_mobile_platform - / / / / / / /
o qualcomm snapdragon_8_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_2_mobile_platform - / / / / / / /
o qualcomm snapdragon_429_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_429_mobile_platform - / / / / / / /
o qualcomm sm8750p_firmware - / / / / / / /
h qualcomm sm8750p - / / / / / / /
o qualcomm sm8750_firmware - / / / / / / /
h qualcomm sm8750 - / / / / / / /
o qualcomm sm8635_firmware - / / / / / / /
h qualcomm sm8635 - / / / / / / /
o qualcomm sm8550p_firmware - / / / / / / /
h qualcomm sm8550p - / / / / / / /
o qualcomm sdm429w_firmware - / / / / / / /
h qualcomm sdm429w - / / / / / / /
o qualcomm sc8380xp_firmware - / / / / / / /
h qualcomm sc8380xp - / / / / / / /
o qualcomm sa9000p_firmware - / / / / / / /
h qualcomm sa9000p - / / / / / / /
o qualcomm sa8775p_firmware - / / / / / / /
h qualcomm sa8775p - / / / / / / /
o qualcomm sa8650p_firmware - / / / / / / /
h qualcomm sa8650p - / / / / / / /
o qualcomm sa8620p_firmware - / / / / / / /
h qualcomm sa8620p - / / / / / / /
o qualcomm sa8255p_firmware - / / / / / / /
h qualcomm sa8255p - / / / / / / /
o qualcomm sa7775p_firmware - / / / / / / /
h qualcomm sa7775p - / / / / / / /
o qualcomm sa7255p_firmware - / / / / / / /
h qualcomm sa7255p - / / / / / / /
o qualcomm qfw7124_firmware - / / / / / / /
h qualcomm qfw7124 - / / / / / / /
o qualcomm qfw7114_firmware - / / / / / / /
h qualcomm qfw7114 - / / / / / / /
o qualcomm qcn6274_firmware - / / / / / / /
h qualcomm qcn6274 - / / / / / / /
o qualcomm qcn6224_firmware - / / / / / / /
h qualcomm qcn6224 - / / / / / / /
o qualcomm qcm8550_firmware - / / / / / / /
h qualcomm qcm8550 - / / / / / / /
o qualcomm qcc710_firmware - / / / / / / /
h qualcomm qcc710 - / / / / / / /
o qualcomm qcc2076_firmware - / / / / / / /
h qualcomm qcc2076 - / / / / / / /
o qualcomm qcc2073_firmware - / / / / / / /
h qualcomm qcc2073 - / / / / / / /
o qualcomm qca8337_firmware - / / / / / / /
h qualcomm qca8337 - / / / / / / /
o qualcomm qca8081_firmware - / / / / / / /
h qualcomm qca8081 - / / / / / / /
o qualcomm qca6797aq_firmware - / / / / / / /
h qualcomm qca6797aq - / / / / / / /
o qualcomm qca6787aq_firmware - / / / / / / /
h qualcomm qca6787aq - / / / / / / /
o qualcomm qca6777aq_firmware - / / / / / / /
h qualcomm qca6777aq - / / / / / / /
o qualcomm qca6698aq_firmware - / / / / / / /
h qualcomm qca6698aq - / / / / / / /
o qualcomm qca6696_firmware - / / / / / / /
h qualcomm qca6696 - / / / / / / /
o qualcomm qca6595au_firmware - / / / / / / /
h qualcomm qca6595au - / / / / / / /
o qualcomm qca6595_firmware - / / / / / / /
h qualcomm qca6595 - / / / / / / /
o qualcomm qca6584au_firmware - / / / / / / /
h qualcomm qca6584au - / / / / / / /
o qualcomm qca6574au_firmware - / / / / / / /
h qualcomm qca6574au - / / / / / / /
o qualcomm qca6574a_firmware - / / / / / / /
h qualcomm qca6574a - / / / / / / /
o qualcomm qca6574_firmware - / / / / / / /
h qualcomm qca6574 - / / / / / / /
o qualcomm qca6564au_firmware - / / / / / / /
h qualcomm qca6564au - / / / / / / /
o qualcomm qca6554a_firmware - / / / / / / /
h qualcomm qca6554a - / / / / / / /
o qualcomm qam8775p_firmware - / / / / / / /
h qualcomm qam8775p - / / / / / / /
o qualcomm qam8650p_firmware - / / / / / / /
h qualcomm qam8650p - / / / / / / /
o qualcomm qam8255p_firmware - / / / / / / /
h qualcomm qam8255p - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /
o qualcomm ar8035_firmware - / / / / / / /
h qualcomm ar8035 - / / / / / / /

CVSS Score

7.5 / 10

CVSS Data

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: NONE
  • Scope: UNCHANGED
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: HIGH
  • View Vector String

    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Date

  • Published: Nov. 4, 2024, 10:15 a.m.
  • Last Modified: Nov. 7, 2024, 8:06 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.