CVE-2024-38404: Qualcomm AR8035 Firmware

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCC710 Firmware: affected versions not specified
• Qualcomm QCN6224 Firmware: affected versions not specified
• Qualcomm QCN6274 Firmware: affected versions not specified
• Qualcomm QFW7114 Firmware: affected versions not specified
• Qualcomm QFW7124 Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm SDX80M Firmware: affected versions not specified
• Qualcomm SM7675 Firmware: affected versions not specified
• Qualcomm SM7675P Firmware: affected versions not specified
• Qualcomm SM8635 Firmware: affected versions not specified
• Qualcomm SM8635P Firmware: affected versions not specified
• Qualcomm Snapdragon 429 Mobile Firmware: affected versions not specified
• Qualcomm Snapdragon 8 Gen 3 Mobile Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm Snapdragon Wear 4100+ Firmware: affected versions not specified
• Qualcomm Snapdragon x72 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm Snapdragon x75 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm WCD9340 Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• and 15 more

Published 2025-02-03. Last modified 2026-06-17.