Skip to main content

C V2x 9150 Firmware CVE-2024-21453

HIGH
Improper Input Validation (CWE-20)
2024-04-01 product-security@qualcomm.com
7.5
CVSS 3.1 · Vendor: qualcomm
Share

Severity by source

Vendor (qualcomm) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (qualcomm) · only source for this CVE.

CVSS VectorVendor: qualcomm

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 01, 2024 - 15:15 cve.org
HIGH 7.5

DescriptionCVE.org

Transient DOS while decoding message of size that exceeds the available system memory.

AnalysisAI

Transient DOS while decoding message of size that exceeds the available system memory. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Transient DOS while decoding message of size that exceeds the available system memory. Affected products include: Qualcomm C-V2X 9150 Firmware, Qualcomm Qcs410 Firmware, Qualcomm Qcs610 Firmware, Qualcomm Video Collaboration Vc1 Platform Firmware, Qualcomm Video Collaboration Vc3 Platform Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2026-21385 HIGH POC
7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

CVE-2023-33032 CRITICAL
9.3 Jan 02

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Rated critical severity (CVSS 9.3

CVE-2023-33030 CRITICAL
9.3 Jan 02

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no

CVE-2023-28585 HIGH
8.8 Dec 05

Memory corruption while loading an ELF segment in TEE Kernel. Rated high severity (CVSS 8.8), this vulnerability is low

CVE-2023-33114 HIGH
8.4 Jan 02

Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitt

CVE-2023-33033 HIGH
8.4 Jan 02

Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability i

CVE-2023-33120 HIGH
7.8 Jan 02

Memory corruption in Audio when memory map command is executed consecutively in ADSP. Rated high severity (CVSS 7.8), th

CVE-2024-45564 HIGH
7.8 May 06

Memory corruption during concurrent access to server info object due to incorrect reference count update. Rated high sev

CVE-2024-43067 HIGH
7.8 Apr 07

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shar

Share

CVE-2024-21453 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy