Medium severity · published Aug 5, 2024
CVE-2024-23350
Reachable Assertion in Multi Mode Call Processor
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Snapdragon · Qualcomm, Inc.
AR8035; FastConnect 6900; FastConnect 7800; QCA6174A; QCA6584AU; QCA6698AQ; +19 more · source: vendor
AF
Ar8035 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6174a Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6584au Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca6698aq Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca8081 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qca8337 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qcc710 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qcn6224 Firmware · Qualcomm
0 · source: NVD, CISA
QF
Qcn6274 Firmware · Qualcomm
0 · source: NVD, CISA
Affected product
SN
Snapdragon
Qualcomm, Inc.
More from Snapdragon
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2024-43047
Use After Free in DSP Service
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux