CVE-2024-53025

nvd nist

Published: Mar 3, 2025Modified: Mar 6, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: product-security@qualcomm.com (Secondary)

Description

Transient DOS can occur while processing UCI command.

Affected (18)

Products: Qualcomm: Fastconnect 7800 Firmware, Sm8750 Firmware, Sm8750p Firmware, Snapdragon 8 Gen 3 Firmware, Wcd9390 Firmware, Wcd9395 Firmware, Wcn6450 Firmware, Wcn6755 Firmware, Wcn7860 Firmware, Wcn7861 Firmware, Wcn7880 Firmware, Wcn7881 Firmware, Wsa8830 Firmware, Wsa8832 Firmware, Wsa8835 Firmware, Wsa8840 Firmware, Wsa8845 Firmware, Wsa8845h Firmware

Qualcomm

18 products

Fastconnect 7800 Firmware

Sm8750 Firmware

Sm8750p Firmware

Snapdragon 8 Gen 3 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8750 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8750	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8750p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8750p	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8 Gen 3 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8 Gen 3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9390 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9390	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9395 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9395	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6450 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6450	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6755 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6755	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7860 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7860	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7861 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7861	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7880 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7880	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7881 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7881	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8830 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8830	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8832 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8832	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8835 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8835	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8840 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8840	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845h Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845h	All versions

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.