CVE-2024-23350: medium-severity vulnerability in Qualcomm, Inc. Snapdragon
Reachable Assertion in Multi Mode Call Processor
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.2%
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Qualcomm, Inc. · SnapdragonRelated CVEs — Qualcomm, Inc. Snapdragon
In the same product, most dangerous first.
CVE-2026-21385HIGHInteger Overflow or Wraparound in GraphicsEPSS 1.3%KEVCVE-2025-27038HIGHUse After Free in GraphicsEPSS 1.0%KEVCVE-2023-33106HIGHUse of Out-of-range Pointer Offset in GraphicsEPSS 0.8%KEVCVE-2025-21479HIGHIncorrect Authorization in GraphicsEPSS 0.8%KEVCVE-2023-33107HIGHInteger Overflow or Wraparound in Graphics LinuxEPSS 0.7%KEVCVE-2024-43047HIGHUse After Free in DSP ServiceEPSS 0.7%KEV