CVE-2023-24855 : Memory corruption in Modem while processing security related configuration befor

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Published 2023-10-03 06:15:24

Updated 2024-04-12 17:17:00

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-24855

Qualcomm » Qca8081 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8081 » Version: N/A
Qualcomm » Qca6391 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6391 » Version: N/A
Qualcomm » Wcd9340 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9340 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Ar8035 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ar8035 » Version: N/A
Qualcomm » Qca8337 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8337 » Version: N/A
Qualcomm » Qcn6024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6024 » Version: N/A
Qualcomm » Qcn9024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9024 » Version: N/A
Qualcomm » Wcd9370 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9370 » Version: N/A
Qualcomm » Wcd9375 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9375 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wcn3950 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3950 » Version: N/A
Qualcomm » Wcn3988 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3988 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Wcn6740 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn6740 » Version: N/A
Qualcomm » Sm7325p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325p » Version: N/A
Qualcomm » Qcm6490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm6490 » Version: N/A
Qualcomm » Qcs6490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs6490 » Version: N/A
Qualcomm » Sdx57m Firmware » Version: N/A
cpe:2.3:o:qualcomm:sdx57m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdx57m » Version: N/A
Qualcomm » Wsa8832 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8832 » Version: N/A
Qualcomm » Qcc710 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcc710 » Version: N/A
Qualcomm » Sg8275p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sg8275p » Version: N/A
Qualcomm » Wcd9390 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9390 » Version: N/A
Qualcomm » Wcd9395 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9395 » Version: N/A
Qualcomm » Wsa8840 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8840 » Version: N/A
Qualcomm » Wsa8845 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845 » Version: N/A
Qualcomm » Wsa8845h Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845h » Version: N/A
Qualcomm » Sm4350-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm4350-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm4350-ac » Version: N/A
Qualcomm » Sm7325-ae Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325-ae_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325-ae » Version: N/A
Qualcomm » Sm7325-af Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325-af_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325-af » Version: N/A
Qualcomm » Sm8350-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8350-ac » Version: N/A
Qualcomm » Snapdragon X65 5g Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X65 5g Modem-rf System » Version: N/A
Qualcomm » Snapdragon X70 Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X70 Modem-rf System » Version: N/A
Qualcomm » Snapdragon 7c+ Gen 3 Compute Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 7c+ Gen 3 Compute » Version: N/A
Qualcomm » Qcm4490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm4490 » Version: N/A
Qualcomm » Qcs4490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs4490 » Version: N/A
Qualcomm » Qcs8550 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs8550 » Version: N/A
Qualcomm » Snapdragon 695 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 695 5g Mobile Platform » Version: N/A
Qualcomm » Fastconnect 6200 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6200 » Version: N/A
Qualcomm » Fastconnect 6900 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6900 » Version: N/A
Qualcomm » Fastconnect 6700 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6700 » Version: N/A
Qualcomm » Fastconnect 7800 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 7800 » Version: N/A
Qualcomm » Snapdragon 4 Gen 1 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 4 Gen 1 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 480 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 480 5g Mobile Platform » Version: N/A
Qualcomm » Snapdragon 780g 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 780g 5g Mobile Platform » Version: N/A
Qualcomm » Snapdragon 888 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 888 5g Mobile Platform » Version: N/A
Qualcomm » Snapdragon 778g 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 778g 5g Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8 Gen 1 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8 Gen 1 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8+ Gen 1 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8+ Gen 1 Mobile Platform » Version: N/A
Qualcomm » Qcm8550 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm8550 » Version: N/A
Qualcomm » Qcn6224 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6224 » Version: N/A
Qualcomm » Qcn6274 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6274 » Version: N/A
Qualcomm » Qfw7114 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qfw7114 » Version: N/A
Qualcomm » Qfw7124 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qfw7124 » Version: N/A
Qualcomm » Qualcomm Video Collaboration Vc3 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qualcomm Video Collaboration Vc3 Platform » Version: N/A
Qualcomm » Sm8550p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8550p » Version: N/A
Qualcomm » Snapdragon 4 Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 4 Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8 Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8 Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon X75 5g Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X75 5g Modem-rf System » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-24855

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 51 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-24855

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Qualcomm, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-24855

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)
CWE-823 Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

Assigned by: product-security@qualcomm.com (Secondary)

References for CVE-2023-24855

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

Security Bulletins | Qualcomm Documentation
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-24855

Products affected by CVE-2023-24855

Exploit prediction scoring system (EPSS) score for CVE-2023-24855

CVSS scores for CVE-2023-24855

CWE ids for CVE-2023-24855

References for CVE-2023-24855