CVE-2024-38404

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38404
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:sdx80m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx80m:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_429_mobile_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_429_mobile:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_wear_4100\+_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_4100\+:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*
History

05 Feb 2025, 13:59

Type Values Removed Values Added
Summary
  • (es) DOS transitorio cuando se recibe un mensaje de aceptación de registro OTA con datos de clave de cifrado incorrectos en IE en el módem.
CPE cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_wear_4100\+:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_429_mobile_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx80m:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sdx80m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_429_mobile:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_wear_4100\+_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
CWE CWE-125
First Time Qualcomm sm8635p Firmware
Qualcomm qca8337
Qualcomm qcc710 Firmware
Qualcomm wcd9395
Qualcomm wcn3610 Firmware
Qualcomm qca6698aq Firmware
Qualcomm qcn6224 Firmware
Qualcomm wcd9340
Qualcomm qca8081 Firmware
Qualcomm ar8035 Firmware
Qualcomm snapdragon Wear 4100\+ Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm wcn3620
Qualcomm snapdragon 8 Gen 3 Mobile
Qualcomm sdm429w
Qualcomm snapdragon 8 Gen 3 Mobile Firmware
Qualcomm sm7675p Firmware
Qualcomm wcn3680b Firmware
Qualcomm qfw7124 Firmware
Qualcomm snapdragon X75 5g Modem-rf System Firmware
Qualcomm qcn6274
Qualcomm wcn3680b
Qualcomm wsa8845h Firmware
Qualcomm wcd9370 Firmware
Qualcomm wcn3620 Firmware
Qualcomm qca8337 Firmware
Qualcomm sm8635
Qualcomm qfw7114 Firmware
Qualcomm sdm429w Firmware
Qualcomm wsa8840
Qualcomm sdx80m Firmware
Qualcomm sm7675 Firmware
Qualcomm snapdragon X72 5g Modem-rf System
Qualcomm fastconnect 7800
Qualcomm wsa8830
Qualcomm qca6584au
Qualcomm qcn6274 Firmware
Qualcomm wsa8832 Firmware
Qualcomm wcn3660b
Qualcomm qcn6224
Qualcomm
Qualcomm wcd9370
Qualcomm wcn3980
Qualcomm qfw7114
Qualcomm wcn6755 Firmware
Qualcomm sm8635 Firmware
Qualcomm wsa8835
Qualcomm wcn3980 Firmware
Qualcomm wcn6755
Qualcomm snapdragon X72 5g Modem-rf System Firmware
Qualcomm snapdragon X75 5g Modem-rf System
Qualcomm wcd9390
Qualcomm qfw7124
Qualcomm wsa8832
Qualcomm sdx80m
Qualcomm sm7675p
Qualcomm snapdragon Wear 4100\+
Qualcomm wcn3610
Qualcomm wcd9340 Firmware
Qualcomm wcd9375 Firmware
Qualcomm snapdragon 429 Mobile
Qualcomm ar8035
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm wcd9390 Firmware
Qualcomm wsa8845 Firmware
Qualcomm wsa8835 Firmware
Qualcomm qca8081
Qualcomm wsa8845
Qualcomm wsa8840 Firmware
Qualcomm qca6584au Firmware
Qualcomm sm8635p
Qualcomm wcd9395 Firmware
Qualcomm snapdragon 429 Mobile Firmware
Qualcomm wsa8845h
Qualcomm wcd9375
Qualcomm fastconnect 7800 Firmware
Qualcomm qcc710
Qualcomm wcn3660b Firmware
Qualcomm wsa8830 Firmware
Qualcomm qca6698aq
Qualcomm sm7675
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html - Vendor Advisory

03 Feb 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-03 17:15

Updated : 2025-02-05 13:59

NVD link : CVE-2024-38404

Mitre link : CVE-2024-38404

CVE.ORG link : CVE-2024-38404

JSON object : View

Products Affected

qualcomm

  • wcd9340_firmware
  • snapdragon_x72_5g_modem-rf_system
  • wsa8845
  • qcn6224_firmware
  • qca6584au
  • qca6584au_firmware
  • ar8035_firmware
  • qcc710_firmware
  • wsa8845h
  • snapdragon_auto_5g_modem-rf_gen_2_firmware
  • wsa8835_firmware
  • sdm429w_firmware
  • wcn3620
  • wcn3660b
  • snapdragon_429_mobile_firmware
  • sdx80m
  • sm7675_firmware
  • wsa8840
  • fastconnect_7800
  • snapdragon_wear_4100\+
  • wsa8832
  • wcn3680b_firmware
  • qcn6274_firmware
  • wcn3610_firmware
  • snapdragon_8_gen_3_mobile_firmware
  • qca6698aq
  • sdm429w
  • wcd9370_firmware
  • sm7675p_firmware
  • wcd9395_firmware
  • wcn3620_firmware
  • wcd9370
  • qca6698aq_firmware
  • wsa8845_firmware
  • wcn3980_firmware
  • wcd9390_firmware
  • sm7675p
  • sm8635_firmware
  • qca8081
  • snapdragon_x75_5g_modem-rf_system_firmware
  • wsa8845h_firmware
  • wsa8840_firmware
  • qfw7114_firmware
  • snapdragon_429_mobile
  • qcn6274
  • qcn6224
  • qca8081_firmware
  • sm8635p
  • wcd9375_firmware
  • sm8635p_firmware
  • wcn6755
  • wcd9395
  • wcd9375
  • wcn3680b
  • ar8035
  • wsa8830_firmware
  • qca8337
  • sm8635
  • fastconnect_7800_firmware
  • wcn3660b_firmware
  • wcn3980
  • snapdragon_wear_4100\+_firmware
  • qcc710
  • wsa8830
  • wcn6755_firmware
  • wcd9340
  • sdx80m_firmware
  • snapdragon_x72_5g_modem-rf_system_firmware
  • wcn3610
  • qfw7124_firmware
  • sm7675
  • snapdragon_x75_5g_modem-rf_system
  • wsa8832_firmware
  • qfw7124
  • snapdragon_auto_5g_modem-rf_gen_2
  • snapdragon_8_gen_3_mobile
  • wcd9390
  • wsa8835
  • qfw7114
  • qca8337_firmware
CWE
CWE-126

Buffer Over-read

CWE-125

Out-of-bounds Read