CVE-2024-38404

HIGH

Qualcomm Modem Firmware - Denial of Service via OTA Registration

Title source: llm
STIX 2.1

Description

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0031
EPSS Percentile 54.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-125 CWE-126
Status published
Products (40)
qualcomm/ar8035_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/qca6584au_firmware
qualcomm/qca6698aq_firmware
qualcomm/qca8081_firmware
qualcomm/qca8337_firmware
qualcomm/qcc710_firmware
qualcomm/qcn6224_firmware
qualcomm/qcn6274_firmware
qualcomm/qfw7114_firmware
... and 30 more
Published Feb 03, 2025
Tracked Since Feb 18, 2026