CVE-2024-49846

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49846
Memory corruption while decoding of OTA messages from T3448 IE.

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6688aq:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:sdx80m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx80m:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:*
History

09 May 2025, 19:10

Type Values Removed Values Added
CPE cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sdx80m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6688aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx80m:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html - Vendor Advisory
First Time Qualcomm wsa8845
Qualcomm wsa8840 Firmware
Qualcomm snapdragon X72 5g Modem-rf System
Qualcomm qfw7114
Qualcomm sm8750p
Qualcomm snapdragon X75 5g Modem-rf System Firmware
Qualcomm qca8081
Qualcomm wcd9340 Firmware
Qualcomm sw5100p Firmware
Qualcomm snapdragon X75 5g Modem-rf System
Qualcomm qcc710 Firmware
Qualcomm qca6678aq Firmware
Qualcomm wsa8835
Qualcomm wsa8845h Firmware
Qualcomm snapdragon X72 5g Modem-rf System Firmware
Qualcomm snapdragon W5\+ Gen 1 Wearable
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm ar8035 Firmware
Qualcomm qca6698aq
Qualcomm sm8750p Firmware
Qualcomm wcd9395 Firmware
Qualcomm qca6574au Firmware
Qualcomm sw5100p
Qualcomm
Qualcomm wsa8845 Firmware
Qualcomm qfw7124
Qualcomm wsa8830
Qualcomm sw5100 Firmware
Qualcomm sdx80m
Qualcomm qfw7124 Firmware
Qualcomm ar8035
Qualcomm qfw7114 Firmware
Qualcomm qca6688aq
Qualcomm sm8750
Qualcomm fastconnect 7800
Qualcomm wsa8845h
Qualcomm wsa8832
Qualcomm wsa8832 Firmware
Qualcomm qcc710
Qualcomm qca6595au Firmware
Qualcomm qca8337
Qualcomm qcn6224 Firmware
Qualcomm qcn6274 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware
Qualcomm wcd9340
Qualcomm qcn6224
Qualcomm qca8081 Firmware
Qualcomm qca6678aq
Qualcomm qca6688aq Firmware
Qualcomm sdx80m Firmware
Qualcomm sw5100
Qualcomm qca6595au
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm sm8750 Firmware
Qualcomm qca6574au
Qualcomm wcd9395
Qualcomm wsa8840
Qualcomm qcn6274
Qualcomm qca6698aq Firmware
Qualcomm qca8337 Firmware
Qualcomm fastconnect 7800 Firmware
CWE CWE-125

07 May 2025, 14:13

Type Values Removed Values Added
Summary
  • (es) Corrupción de memoria durante la decodificación de mensajes OTA de T3448 IE.

06 May 2025, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-06 09:15

Updated : 2025-05-09 19:10

NVD link : CVE-2024-49846

Mitre link : CVE-2024-49846

CVE.ORG link : CVE-2024-49846

JSON object : View

Products Affected

qualcomm

  • qca6688aq
  • sdx80m
  • qca8337_firmware
  • wsa8845
  • qcn6274_firmware
  • qcn6224_firmware
  • sw5100p_firmware
  • wcd9340_firmware
  • wsa8830
  • ar8035
  • qca6574au_firmware
  • snapdragon_x75_5g_modem-rf_system
  • sm8750_firmware
  • qca8081
  • wsa8840_firmware
  • qfw7114_firmware
  • qca8337
  • snapdragon_x75_5g_modem-rf_system_firmware
  • ar8035_firmware
  • fastconnect_7800
  • qcn6224
  • sm8750
  • qfw7114
  • qca6574au
  • qca6678aq_firmware
  • wcd9340
  • qca6688aq_firmware
  • snapdragon_w5\+_gen_1_wearable
  • qca6678aq
  • wcd9395
  • sdx80m_firmware
  • wsa8832
  • qca6698aq
  • wcd9395_firmware
  • wsa8835
  • sw5100p
  • qca6595au_firmware
  • snapdragon_auto_5g_modem-rf_gen_2
  • qfw7124_firmware
  • sm8750p
  • snapdragon_auto_5g_modem-rf_gen_2_firmware
  • wsa8832_firmware
  • snapdragon_w5\+_gen_1_wearable_firmware
  • wsa8835_firmware
  • sw5100_firmware
  • wsa8840
  • wsa8830_firmware
  • qca6595au
  • sw5100
  • qfw7124
  • qca6698aq_firmware
  • sm8750p_firmware
  • snapdragon_x72_5g_modem-rf_system_firmware
  • wsa8845_firmware
  • qca8081_firmware
  • wsa8845h
  • wsa8845h_firmware
  • qcn6274
  • fastconnect_7800_firmware
  • qcc710
  • snapdragon_x72_5g_modem-rf_system
  • qcc710_firmware
CWE
CWE-126

Buffer Over-read

CWE-125

Out-of-bounds Read