CVE-2024-38408: Qualcomm 315 5g IoT Modem Firmware

Critical severity, CVSS 9.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 214 Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 216 Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 316 Platform Firmware: affected versions not specified
• Qualcomm Immersive Home 318 Platform Firmware: affected versions not specified
• Qualcomm IPQ5010 Firmware: affected versions not specified
• Qualcomm IPQ5028 Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QAM8620P Firmware: affected versions not specified
• Qualcomm QAM8650P Firmware: affected versions not specified
• Qualcomm QAM8775P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm QCA1062 Firmware: affected versions not specified
• Qualcomm QCA1064 Firmware: affected versions not specified
• and 210 more

Published 2024-11-04. Last modified 2026-06-17.