205 Mobile Platform Firmware
CVE-2024-23353
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
Lifecycle Timeline
1DescriptionCVE.org
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
AnalysisAI
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-126. Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. Affected products include: Qualcomm Wsa8845H Firmware, Qualcomm Wsa8845 Firmware, Qualcomm Wsa8840 Firmware, Qualcomm Wsa8835 Firmware, Qualcomm Wsa8832 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in 205 Mobile Platform Firmware
View allCVE-2024-53026 is an information disclosure vulnerability in IMS (IP Multimedia Subsystem) implementations affecting VoL
CVE-2024-53021 is an information disclosure vulnerability in RTCP (Real-time Transport Control Protocol) packet processi
CVE-2024-53020 is an information disclosure vulnerability in RTP (Real-time Transport Protocol) packet processing that o
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. Rated
Memory corruption while processing API calls to NPU with invalid input. Rated high severity (CVSS 7.8), this vulnerabili
Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.
Memory corruption while processing GPU page table switch. Rated high severity (CVSS 7.8), this vulnerability is low atta
Memory corruption while processing voice packet with arbitrary data received from ADSP. Rated high severity (CVSS 7.8),
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corruptin
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. Rated high severity (
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem. Rated high severit
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. Rated medium sev
Same weakness CWE-126 – Buffer Over-read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today