CVE-2024-38404
7.5 highEPSS 0.3%
High (7.5) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-125, CWE-126
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ar8035_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qca8081_firmware
- qualcomm:qca8337_firmware
- qualcomm:qcc710_firmware
- qualcomm:qcn6224_firmware
- qualcomm:qcn6274_firmware
- qualcomm:qfw7114_firmware
- qualcomm:qfw7124_firmware
- qualcomm:sdm429w_firmware
- qualcomm:sdx80m_firmware
- qualcomm:sm7675_firmware
- qualcomm:sm7675p_firmware
- qualcomm:sm8635_firmware
- qualcomm:sm8635p_firmware
- qualcomm:snapdragon_429_mobile_firmware
- qualcomm:snapdragon_8_gen_3_mobile_firmware
- qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware
- qualcomm:snapdragon_wear_4100\+_firmware
- qualcomm:snapdragon_x72_5g_modem-rf_system_firmware
- qualcomm:snapdragon_x75_5g_modem-rf_system_firmware
- qualcomm:wcd9340_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcd9390_firmware
- qualcomm:wcd9395_firmware
- qualcomm:wcn3610_firmware
- qualcomm:wcn3620_firmware
- qualcomm:wcn3660b_firmware
- qualcomm:wcn3680b_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wcn6755_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8832_firmware
- qualcomm:wsa8835_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware
References
Check your stackJSON