CVE-2024-21453

nvd nist

Published: Apr 1, 2024Modified: Aug 11, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: product-security@qualcomm.com (Secondary)

Description

Transient DOS while decoding message of size that exceeds the available system memory.

Affected (13)

Products: Qualcomm: C V2x 9150 Firmware, Qcs410 Firmware, Qcs610 Firmware, Video Collaboration Vc1 Platform Firmware, Video Collaboration Vc3 Platform Firmware, Snapdragon Auto 5g Modem Rf Firmware, Snapdragon Auto 4g Modem Firmware, Wcd9341 Firmware, Wcd9370 Firmware, Wcn3950 Firmware, Wcn3980 Firmware, Wsa8810 Firmware, Wsa8815 Firmware

13 products

Video Collaboration Vc1 Platform Firmware

Video Collaboration Vc3 Platform Firmware

Snapdragon Auto 5g Modem Rf Firmware

Snapdragon Auto 4g Modem Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm C V2x 9150 Firmware	All versions

Running on/with	Platform Versions
Qualcomm C V2x 9150	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs410 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs410	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs610 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs610	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Video Collaboration Vc1 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Video Collaboration Vc1 Platform	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Video Collaboration Vc3 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Video Collaboration Vc3 Platform	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Auto 5g Modem Rf Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Auto 5g Modem Rf	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon Auto 4g Modem Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon Auto 4g Modem	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9341 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9341	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9370 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9370	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3950 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3950	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3980 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3980	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8810 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8810	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8815 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8815	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.