CVE-2024-21453
Improper Input Validation in Automotive Telematics
Transient DOS while decoding message of size that exceeds the available system memory.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.5
Improper Input Validation in Automotive Telematics
Transient DOS while decoding message of size that exceeds the available system memory.
- Record
CVE-2024-21453- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2024-19162
7.5
Transient DOS while decoding message of size that exceeds the available system memory.
- Record
EUVD-2024-19162- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6gr4-fjw7-47pw
7.5
Transient DOS while decoding message of size that exceeds the available system memory.
Transient DOS while decoding message of size that exceeds the available system memory.
- Record
GHSA-6gr4-fjw7-47pw- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
7.5
Transient DOS while decoding message of size that exceeds the available system memory.
- Record
CVE-2024-21453- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- qualcomm c-v2x 9150
- qualcomm c-v2x 9150 firmware
- qualcomm qcs410
- qualcomm qcs410 firmware
- qualcomm qcs610
- qualcomm qcs610 firmware
- qualcomm snapdragon auto 4g modem
- qualcomm snapdragon auto 4g modem firmware
- qualcomm snapdragon auto 5g modem-rf
- qualcomm snapdragon auto 5g modem-rf firmware
- qualcomm video collaboration vc1
- qualcomm video collaboration vc1 platform firmware
Show 15 moreShow less
- qualcomm video collaboration vc3
- qualcomm video collaboration vc3 platform firmware
- qualcomm wcd9341
- qualcomm wcd9341 firmware
- qualcomm wcd9370
- qualcomm wcd9370 firmware
- qualcomm wcn3950
- qualcomm wcn3950 firmware
- qualcomm wcn3980
- qualcomm wcn3980 firmware
- qualcomm wsa8810
- qualcomm wsa8810 firmware
- qualcomm wsa8815
- qualcomm wsa8815 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-21453 is a high vulnerability (CVSS 7.5) in Qualcomm C-v2x 9150, published April 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.