Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-38403

Nov. 7, 2024, 8:06 p.m.

CVSS Score

6.5 / 10

Products Impacted

Vendor Product Versions
qualcomm
  • wsa8845h_firmware
  • wsa8845h
  • wsa8845_firmware
  • wsa8845
  • wsa8840_firmware
  • wsa8840
  • wsa8835_firmware
  • wsa8835
  • wsa8832_firmware
  • wsa8832
  • wsa8830_firmware
  • wsa8830
  • wcn7881_firmware
  • wcn7881
  • wcn7880_firmware
  • wcn7880
  • wcn7861_firmware
  • wcn7861
  • wcn7860_firmware
  • wcn7860
  • wcn6755_firmware
  • wcn6755
  • wcn3980_firmware
  • wcn3980
  • wcn3680b_firmware
  • wcn3680b
  • wcn3660b_firmware
  • wcn3660b
  • wcn3620_firmware
  • wcn3620
  • wcn3610_firmware
  • wcn3610
  • wcd9395_firmware
  • wcd9395
  • wcd9390_firmware
  • wcd9390
  • wcd9385_firmware
  • wcd9385
  • wcd9380_firmware
  • wcd9380
  • wcd9375_firmware
  • wcd9375
  • wcd9370_firmware
  • wcd9370
  • wcd9340_firmware
  • wcd9340
  • sxr2250p_firmware
  • sxr2250p
  • sxr2230p_firmware
  • sxr2230p
  • sxr1230p_firmware
  • sxr1230p
  • ssg2125p_firmware
  • ssg2125p
  • ssg2115p_firmware
  • ssg2115p
  • snapdragon_x75_5g_modem-rf_system_firmware
  • snapdragon_x75_5g_modem-rf_system
  • snapdragon_x72_5g_modem-rf_system_firmware
  • snapdragon_x72_5g_modem-rf_system
  • snapdragon_wear_4100\+_platform_firmware
  • snapdragon_wear_4100\+_platform
  • snapdragon_ar2_gen_1_platform_firmware
  • snapdragon_ar2_gen_1_platform
  • snapdragon_8\+_gen_2_mobile_platform_firmware
  • snapdragon_8\+_gen_2_mobile_platform
  • snapdragon_8_gen_3_mobile_platform_firmware
  • snapdragon_8_gen_3_mobile_platform
  • snapdragon_8_gen_2_mobile_platform_firmware
  • snapdragon_8_gen_2_mobile_platform
  • snapdragon_429_mobile_platform_firmware
  • snapdragon_429_mobile_platform
  • sm8750p_firmware
  • sm8750p
  • sm8750_firmware
  • sm8750
  • sm8635_firmware
  • sm8635
  • sm8550p_firmware
  • sm8550p
  • sdm429w_firmware
  • sdm429w
  • sc8380xp_firmware
  • sc8380xp
  • sa9000p_firmware
  • sa9000p
  • sa8775p_firmware
  • sa8775p
  • sa8650p_firmware
  • sa8650p
  • sa8620p_firmware
  • sa8620p
  • sa8255p_firmware
  • sa8255p
  • sa7775p_firmware
  • sa7775p
  • sa7255p_firmware
  • sa7255p
  • qfw7124_firmware
  • qfw7124
  • qfw7114_firmware
  • qfw7114
  • qcn6274_firmware
  • qcn6274
  • qcn6224_firmware
  • qcn6224
  • qcm8550_firmware
  • qcm8550
  • qcc710_firmware
  • qcc710
  • qcc2076_firmware
  • qcc2076
  • qcc2073_firmware
  • qcc2073
  • qca8337_firmware
  • qca8337
  • qca8081_firmware
  • qca8081
  • qca6797aq_firmware
  • qca6797aq
  • qca6787aq_firmware
  • qca6787aq
  • qca6777aq_firmware
  • qca6777aq
  • qca6698aq_firmware
  • qca6698aq
  • qca6696_firmware
  • qca6696
  • qca6595au_firmware
  • qca6595au
  • qca6595_firmware
  • qca6595
  • qca6584au_firmware
  • qca6584au
  • qca6574au_firmware
  • qca6574au
  • qca6574a_firmware
  • qca6574a
  • qca6574_firmware
  • qca6574
  • qca6564au_firmware
  • qca6564au
  • qca6554a_firmware
  • qca6554a
  • qam8775p_firmware
  • qam8775p
  • qam8650p_firmware
  • qam8650p
  • qam8255p_firmware
  • qam8255p
  • fastconnect_7800_firmware
  • fastconnect_7800
  • fastconnect_6900_firmware
  • fastconnect_6900
  • ar8035_firmware
  • ar8035
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Description

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Weaknesses

CWE-125
Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE ID: 125
CWE-126
Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

CWE ID: 126

Date

Published: Nov. 4, 2024, 10:15 a.m.

Last Modified: Nov. 7, 2024, 8:06 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm wsa8845h_firmware - / / / / / / /
h qualcomm wsa8845h - / / / / / / /
o qualcomm wsa8845_firmware - / / / / / / /
h qualcomm wsa8845 - / / / / / / /
o qualcomm wsa8840_firmware - / / / / / / /
h qualcomm wsa8840 - / / / / / / /
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /
o qualcomm wsa8832_firmware - / / / / / / /
h qualcomm wsa8832 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wcn7881_firmware - / / / / / / /
h qualcomm wcn7881 - / / / / / / /
o qualcomm wcn7880_firmware - / / / / / / /
h qualcomm wcn7880 - / / / / / / /
o qualcomm wcn7861_firmware - / / / / / / /
h qualcomm wcn7861 - / / / / / / /
o qualcomm wcn7860_firmware - / / / / / / /
h qualcomm wcn7860 - / / / / / / /
o qualcomm wcn6755_firmware - / / / / / / /
h qualcomm wcn6755 - / / / / / / /
o qualcomm wcn3980_firmware - / / / / / / /
h qualcomm wcn3980 - / / / / / / /
o qualcomm wcn3680b_firmware - / / / / / / /
h qualcomm wcn3680b - / / / / / / /
o qualcomm wcn3660b_firmware - / / / / / / /
h qualcomm wcn3660b - / / / / / / /
o qualcomm wcn3620_firmware - / / / / / / /
h qualcomm wcn3620 - / / / / / / /
o qualcomm wcn3610_firmware - / / / / / / /
h qualcomm wcn3610 - / / / / / / /
o qualcomm wcd9395_firmware - / / / / / / /
h qualcomm wcd9395 - / / / / / / /
o qualcomm wcd9390_firmware - / / / / / / /
h qualcomm wcd9390 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9375_firmware - / / / / / / /
h qualcomm wcd9375 - / / / / / / /
o qualcomm wcd9370_firmware - / / / / / / /
h qualcomm wcd9370 - / / / / / / /
o qualcomm wcd9340_firmware - / / / / / / /
h qualcomm wcd9340 - / / / / / / /
o qualcomm sxr2250p_firmware - / / / / / / /
h qualcomm sxr2250p - / / / / / / /
o qualcomm sxr2230p_firmware - / / / / / / /
h qualcomm sxr2230p - / / / / / / /
o qualcomm sxr1230p_firmware - / / / / / / /
h qualcomm sxr1230p - / / / / / / /
o qualcomm ssg2125p_firmware - / / / / / / /
h qualcomm ssg2125p - / / / / / / /
o qualcomm ssg2115p_firmware - / / / / / / /
h qualcomm ssg2115p - / / / / / / /
o qualcomm snapdragon_x75_5g_modem-rf_system_firmware - / / / / / / /
h qualcomm snapdragon_x75_5g_modem-rf_system - / / / / / / /
o qualcomm snapdragon_x72_5g_modem-rf_system_firmware - / / / / / / /
h qualcomm snapdragon_x72_5g_modem-rf_system - / / / / / / /
o qualcomm snapdragon_wear_4100\+_platform_firmware - / / / / / / /
h qualcomm snapdragon_wear_4100\+_platform - / / / / / / /
o qualcomm snapdragon_ar2_gen_1_platform_firmware - / / / / / / /
h qualcomm snapdragon_ar2_gen_1_platform - / / / / / / /
o qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8\+_gen_2_mobile_platform - / / / / / / /
o qualcomm snapdragon_8_gen_3_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_3_mobile_platform - / / / / / / /
o qualcomm snapdragon_8_gen_2_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_2_mobile_platform - / / / / / / /
o qualcomm snapdragon_429_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_429_mobile_platform - / / / / / / /
o qualcomm sm8750p_firmware - / / / / / / /
h qualcomm sm8750p - / / / / / / /
o qualcomm sm8750_firmware - / / / / / / /
h qualcomm sm8750 - / / / / / / /
o qualcomm sm8635_firmware - / / / / / / /
h qualcomm sm8635 - / / / / / / /
o qualcomm sm8550p_firmware - / / / / / / /
h qualcomm sm8550p - / / / / / / /
o qualcomm sdm429w_firmware - / / / / / / /
h qualcomm sdm429w - / / / / / / /
o qualcomm sc8380xp_firmware - / / / / / / /
h qualcomm sc8380xp - / / / / / / /
o qualcomm sa9000p_firmware - / / / / / / /
h qualcomm sa9000p - / / / / / / /
o qualcomm sa8775p_firmware - / / / / / / /
h qualcomm sa8775p - / / / / / / /
o qualcomm sa8650p_firmware - / / / / / / /
h qualcomm sa8650p - / / / / / / /
o qualcomm sa8620p_firmware - / / / / / / /
h qualcomm sa8620p - / / / / / / /
o qualcomm sa8255p_firmware - / / / / / / /
h qualcomm sa8255p - / / / / / / /
o qualcomm sa7775p_firmware - / / / / / / /
h qualcomm sa7775p - / / / / / / /
o qualcomm sa7255p_firmware - / / / / / / /
h qualcomm sa7255p - / / / / / / /
o qualcomm qfw7124_firmware - / / / / / / /
h qualcomm qfw7124 - / / / / / / /
o qualcomm qfw7114_firmware - / / / / / / /
h qualcomm qfw7114 - / / / / / / /
o qualcomm qcn6274_firmware - / / / / / / /
h qualcomm qcn6274 - / / / / / / /
o qualcomm qcn6224_firmware - / / / / / / /
h qualcomm qcn6224 - / / / / / / /
o qualcomm qcm8550_firmware - / / / / / / /
h qualcomm qcm8550 - / / / / / / /
o qualcomm qcc710_firmware - / / / / / / /
h qualcomm qcc710 - / / / / / / /
o qualcomm qcc2076_firmware - / / / / / / /
h qualcomm qcc2076 - / / / / / / /
o qualcomm qcc2073_firmware - / / / / / / /
h qualcomm qcc2073 - / / / / / / /
o qualcomm qca8337_firmware - / / / / / / /
h qualcomm qca8337 - / / / / / / /
o qualcomm qca8081_firmware - / / / / / / /
h qualcomm qca8081 - / / / / / / /
o qualcomm qca6797aq_firmware - / / / / / / /
h qualcomm qca6797aq - / / / / / / /
o qualcomm qca6787aq_firmware - / / / / / / /
h qualcomm qca6787aq - / / / / / / /
o qualcomm qca6777aq_firmware - / / / / / / /
h qualcomm qca6777aq - / / / / / / /
o qualcomm qca6698aq_firmware - / / / / / / /
h qualcomm qca6698aq - / / / / / / /
o qualcomm qca6696_firmware - / / / / / / /
h qualcomm qca6696 - / / / / / / /
o qualcomm qca6595au_firmware - / / / / / / /
h qualcomm qca6595au - / / / / / / /
o qualcomm qca6595_firmware - / / / / / / /
h qualcomm qca6595 - / / / / / / /
o qualcomm qca6584au_firmware - / / / / / / /
h qualcomm qca6584au - / / / / / / /
o qualcomm qca6574au_firmware - / / / / / / /
h qualcomm qca6574au - / / / / / / /
o qualcomm qca6574a_firmware - / / / / / / /
h qualcomm qca6574a - / / / / / / /
o qualcomm qca6574_firmware - / / / / / / /
h qualcomm qca6574 - / / / / / / /
o qualcomm qca6564au_firmware - / / / / / / /
h qualcomm qca6564au - / / / / / / /
o qualcomm qca6554a_firmware - / / / / / / /
h qualcomm qca6554a - / / / / / / /
o qualcomm qam8775p_firmware - / / / / / / /
h qualcomm qam8775p - / / / / / / /
o qualcomm qam8650p_firmware - / / / / / / /
h qualcomm qam8650p - / / / / / / /
o qualcomm qam8255p_firmware - / / / / / / /
h qualcomm qam8255p - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /
o qualcomm ar8035_firmware - / / / / / / /
h qualcomm ar8035 - / / / / / / /

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Base Score
6.5
Exploitability Score
2.8
Impact Score
3.6
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://docs.qualcomm.com/ product-security@qualcomm.com