CVE-2024-23350: Qualcomm AR8035 Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.

Affected products

  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm Fastconnect 6900 Firmware: affected versions not specified
  • Qualcomm Fastconnect 7800 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6584AU Firmware: affected versions not specified
  • Qualcomm QCA6698AQ Firmware: affected versions not specified
  • Qualcomm QCA8081 Firmware: affected versions not specified
  • Qualcomm QCA8337 Firmware: affected versions not specified
  • Qualcomm QCC710 Firmware: affected versions not specified
  • Qualcomm QCN6224 Firmware: affected versions not specified
  • Qualcomm QCN6274 Firmware: affected versions not specified
  • Qualcomm QEP8111 Firmware: affected versions not specified
  • Qualcomm QFW7114 Firmware: affected versions not specified
  • Qualcomm QFW7124 Firmware: affected versions not specified
  • Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware: affected versions not specified
  • Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
  • Qualcomm Snapdragon x35 5g Modem-Rf System Firmware: affected versions not specified
  • Qualcomm Snapdragon x72 5g Modem-Rf System Firmware: affected versions not specified
  • Qualcomm Snapdragon x75 5g Modem-Rf System Firmware: affected versions not specified
  • Qualcomm WCD9340 Firmware: affected versions not specified
  • Qualcomm WCD9390 Firmware: affected versions not specified
  • Qualcomm WCD9395 Firmware: affected versions not specified
  • Qualcomm WSA8840 Firmware: affected versions not specified
  • Qualcomm WSA8845 Firmware: affected versions not specified
  • Qualcomm WSA8845H Firmware: affected versions not specified

Published 2024-08-05. Last modified 2026-06-17.