CVE-2024-23385: Qualcomm 205 Mobile Platform Firmware

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Affected products

  • Qualcomm 205 Mobile Platform Firmware: affected versions not specified
  • Qualcomm APQ8017 Firmware: affected versions not specified
  • Qualcomm APQ8037 Firmware: affected versions not specified
  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm Fastconnect 6200 Firmware: affected versions not specified
  • Qualcomm Fastconnect 6700 Firmware: affected versions not specified
  • Qualcomm Fastconnect 6900 Firmware: affected versions not specified
  • Qualcomm Fastconnect 7800 Firmware: affected versions not specified
  • Qualcomm FSM10055 Firmware: affected versions not specified
  • Qualcomm FSM10056 Firmware: affected versions not specified
  • Qualcomm MSM8108 Firmware: affected versions not specified
  • Qualcomm MSM8209 Firmware: affected versions not specified
  • Qualcomm MSM8608 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6574A Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6584AU Firmware: affected versions not specified
  • Qualcomm QCA6595AU Firmware: affected versions not specified
  • Qualcomm QCA6696 Firmware: affected versions not specified
  • Qualcomm QCA6698AQ Firmware: affected versions not specified
  • Qualcomm QCA8081 Firmware: affected versions not specified
  • Qualcomm QCA8337 Firmware: affected versions not specified
  • Qualcomm QCC710 Firmware: affected versions not specified
  • Qualcomm QCM4490 Firmware: affected versions not specified
  • Qualcomm QCM8550 Firmware: affected versions not specified
  • and 69 more

Published 2024-11-04. Last modified 2026-06-17.