CVE-2024-23350 — Reachable Assertion in Multi Mode Call Processor

Description (CNA)

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected AR8035; affected FastConnect 6900; affected FastConnect 7800; affected QCA6174A; affected QCA6584AU; affected QCA6698AQ; affected QCA8081; affected QCA8337; affected QCC710; affected QCN6224; affected QCN6274; affected QEP8111; affected QFW7114; affected QFW7124; affected Snapdragon 8 Gen 3 Mobile Platform; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon X35 5G Modem-RF System; affected Snapdragon X72 5G Modem-RF System; affected Snapdragon X75 5G Modem-RF System; affected WCD9340; affected WCD9390; affected WCD9395; affected WSA8840; affected WSA8845; affected WSA8845H

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected AR8035; affected FastConnect 6900; affected FastConnect 7800; affected QCA6174A; affected QCA6584AU; affected QCA6698AQ; affected QCA8081; affected QCA8337; affected QCC710; affected QCN6224; affected QCN6274; affected QEP8111; affected QFW7114; affected QFW7124; affected Snapdragon 8 Gen 3 Mobile Platform; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon X35 5G Modem-RF System; affected Snapdragon X72 5G Modem-RF System; affected Snapdragon X75 5G Modem-RF System; affected WCD9340; affected WCD9390; affected WCD9395; affected WSA8840; affected WSA8845; affected WSA8845H

CWE

CWE-617

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.