← Vulnerability feed

Vulnerability record · CVE-2024-23353 · published 5 August 2024

CVE-2024-23353: Qualcomm wsa8845h firmware out-of-bounds read vulnerability

Qualcomm · Wsa8845h Firmware

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

7.5 CVSS 3.1 High EPSS 0.35% · top 74.4% CWE-126 · CWE-126CWE-125 · Out-of-bounds read
7.5CVSS 3.1 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html Vendor Advisory

Track CVE-2024-23353 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2024-43047Qualcomm chipset firmware use-after-free in HLOS memory map handlingA use-after-free (CWE-416) in Qualcomm chipset firmware occurs while maintaining memory maps of HLOS memory, leading to memory corruption. It affects…KEVEPSS 0.67%analysed7.8CVE-2023-33107Qualcomm Graphics Linux integer overflow memory corruptionCVE-2023-33107 is an integer overflow (CWE-190) in Qualcomm Graphics Linux that causes memory corruption when a shared virtual memory region is assig…KEVEPSS 0.89%analysed7.8CVE-2023-33106Qualcomm GPU AUX Command Sync Point Memory CorruptionCVE-2023-33106 is a memory corruption flaw in Qualcomm chipsets triggered when a large list of sync points is submitted in an AUX command to the IOCT…KEVEPSS 0.92%analysed9.8CVE-2025-21483Qualcomm apq8017 firmware memory buffer overflow vulnerabilityMemory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.EPSS 0.40%9.8CVE-2023-43548Qualcomm aqt1000 firmware classic buffer overflow vulnerabilityMemory corruption while parsing qcp clip with invalid chunk data size.EPSS 0.26%9.8CVE-2023-43518Qualcomm aqt1000 firmware out-of-bounds write vulnerabilityMemory corruption in video while parsing invalid mp2 clip.EPSS 0.26%9.8CVE-2023-43519Qualcomm aqt1000 firmware classic buffer overflow vulnerabilityMemory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.EPSS 0.26%9.8CVE-2023-22388Qualcomm 315 5g iot modem firmware out-of-bounds write vulnerabilityMemory Corruption in Multi-mode Call Processor while processing bit mask API.EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2024-23353), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.