CVE-2024-23353

CVE-2024-23353 affects Qualcomm components (Multi Mode Call Processor) and describes a transient denial-of-service during decoding an attach reject message received by UE when IEI is set to ESM_IEI. CVSSv3.1 base score 7.5 (High) with network attack vector, no user interaction, and impact limited...

CVE-2024-23353 Buffer Over-read in Multi Mode Call Processor

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI...

CVE-2024-23352 Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA...

CVE-2024-23352 Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA...

CVE-2024-23352

CVE-2024-23352 concerns a transient DoS in Qualcomm closed‑source components due to a loop in the Multi Mode Call Processor. The issue manifests when NAS receives ODAC criteria of length 1 and type 1 during registration (OTA). Public documents consistently cite the description, but no concrete pa...

CVE-2024-21479 Buffer Over-read in Audio

Transient DOS during music playback of ALAC content...

CVE-2024-21479 Buffer Over-read in Audio

Transient DOS during music playback of ALAC content...

CVE-2024-21479

Technical details for CVE-2024-21479 are not publicly available in the provided documents. Monitor for updates from sources in the Connected documents; currently no specific affected products, root cause, impact, or fixes are disclosed here.

PT-2024-25058 · Qualcomm · Snapdragon +232

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing multiple MBSSID IEs from a beacon. This happens when the tag length ...

PT-2024-25056 · Qualcomm · Snapdragon +232

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing fragments of the Multiple BSSID Information Element MBSSID IE from a...

PT-2024-25069 · Qualcomm · Snapdragon +169

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs when parsing the ML IE in a beacon, where the length field inside the common info of ML IE is greater than the ML IE length, resulting ...

PT-2024-25065 · Qualcomm · Snapdragon +88

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing TID-to-link mapping IE elements. No information is provided about...

PT-2024-25061 · Qualcomm · Snapdragon +181

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing SCAN RNR IE. This happens when the size of the last parameter of IE ...

PT-2024-25059 · Qualcomm · Snapdragon +159

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs when a driver accesses the ML IE memory and the offset value is incremented beyond the ML IE length, resulting in a transient Denial of...

PT-2024-25060 · Qualcomm · 315 5G Iot Modem Firmware +297

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing ESP IE from beacon/probe response frames. No information is provided...

PT-2024-25071 · Qualcomm · Snapdragon +155

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing probe response and association response frames. This happens when th...

PT-2024-25064 · Qualcomm · Snapdragon +138

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing the received TID-to-link mapping action frame. No additional details...

PT-2024-19832 · Qualcomm · 205 Mobile Platform Firmware +225

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs while decoding an attach reject message received by a UE User Equipment, specifically...

SUSE CVE-2022-48804

In the Linux kernel, the following vulnerability has been resolved: vtioctl: fix arrayindexnospec in vtsetactivate arrayindexnospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console...

CVE-2022-48804

In the Linux kernel, the following vulnerability has been resolved: vtioctl: fix arrayindexnospec in vtsetactivate arrayindexnospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console...