Qualcomm Snapdragon 860 Mobile Platform (sm8150-Ac) Firmware vulnerabilities

2 CVEs affecting Qualcomm Snapdragon 860 Mobile Platform (sm8150-Ac) Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23353, published 2024-08-05.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-23353, published 2024-08-05. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
• CVE-2024-21481, published 2024-08-05. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.