Vulnerability details

CVE-2024-53019

Qualcomm Snapdragon

Buffer Over-read in Data Network Stack & Connectivity

CVSS 3.1
8.2High

Official description

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

CVSS scores

ScoreVersionSourceVector
8.2High 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Affected products

VendorProductVersionsSource
Qualcomm, Inc. Snapdragon FastConnect 6200 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6700 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6310 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6320 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6696 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCM4490 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS4490 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QMP1000 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA4150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA4155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8195P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SD 8 Gen1 5G CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SD835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SDM429W CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM4635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6650 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6650P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8550P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8650Q CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8735 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 429 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 480 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 480+ 5G Mobile Platform (SM4350-AC) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 695 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 2 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8+ Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8+ Gen 2 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 835 Mobile PC Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon TalynPlus CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9335 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9340 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9341 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9390 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3620 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3660B CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3680B CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3980 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3990 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6450 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6650 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6740 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6755 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7880 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7881 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-06-03
Last updated
2025-06-03
State
Published
Assigner (CNA)
qualcomm

Exploit prediction (EPSS)

0.25%
Probability of exploitation in 30 days
17.2%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-126
    Buffer Over-read