CVE-2023-21631
9.8 criticalEPSS 0.4%
Critical (9.8) in qualcomm. EPSS 0.4% chance of exploitation in the next 30 days.
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:205_firmware
- qualcomm:215_firmware
- qualcomm:315_5g_firmware
- qualcomm:9205_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8037_firmware
- qualcomm:aqt1000_firmware
- qualcomm:ar8035_firmware
- qualcomm:c-v2x_9150_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:csrb31024_firmware
- qualcomm:fastconnect_6200_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6800_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:mdm9628_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:qca4004_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qca8081_firmware
- qualcomm:qca8337_firmware
- qualcomm:qca9377_firmware
- qualcomm:qcm2290_firmware
- qualcomm:qcm4290_firmware
- qualcomm:qcm4325_firmware
- qualcomm:qcm4490_firmware
- qualcomm:qcm6490_firmware
- qualcomm:qcn6024_firmware
- qualcomm:qcn9024_firmware
- qualcomm:qcs2290_firmware
- qualcomm:qcs4290_firmware
References
Check your stackJSON