{"id":"CVE-2024-23350","aliases":["EUVD-2024-20854","GHSA-jfgv-r9x2-7mhr"],"status":"published","title":"Reachable Assertion in Multi Mode Call Processor","description":"Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00171,"percentile":0.06561,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-617"],"published":"2024-08-05T14:21:18Z","modified":"2026-06-17T07:12:39Z","products":[{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"fastconnect_6900_firmware"},{"vendor":"qualcomm","product":"fastconnect_7800_firmware"},{"vendor":"qualcomm","product":"qca6174a_firmware"},{"vendor":"qualcomm","product":"qca6584au_firmware"},{"vendor":"qualcomm","product":"qca6698aq_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qcc710_firmware"},{"vendor":"qualcomm","product":"qcn6224_firmware"},{"vendor":"qualcomm","product":"qcn6274_firmware"},{"vendor":"qualcomm","product":"qep8111_firmware"},{"vendor":"qualcomm","product":"qfw7114_firmware"},{"vendor":"qualcomm","product":"qfw7124_firmware"},{"vendor":"qualcomm","product":"snapdragon_8_gen_3_mobile_platform_firmware"},{"vendor":"qualcomm","product":"snapdragon_auto_5g_modem-rf_gen_2_firmware"},{"vendor":"qualcomm","product":"snapdragon_x35_5g_modem-rf_system_firmware"},{"vendor":"qualcomm","product":"snapdragon_x72_5g_modem-rf_system_firmware"},{"vendor":"qualcomm","product":"snapdragon_x75_5g_modem-rf_system_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9390_firmware"},{"vendor":"qualcomm","product":"wcd9395_firmware"},{"vendor":"qualcomm","product":"wsa8840_firmware"},{"vendor":"qualcomm","product":"wsa8845_firmware"},{"vendor":"qualcomm","product":"wsa8845h_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon"}],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23350"},{"url":"https://github.com/advisories/GHSA-jfgv-r9x2-7mhr"}],"sources":{"cve":[{"id":"CVE-2024-23350","title":"Reachable Assertion in Multi Mode Call Processor","description":"Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.","status":"published","published":"2024-08-05T14:21:18.555Z","modified":"2024-08-05T15:02:35.35Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:34:05.823187Z"}],"euvd":[{"id":"EUVD-2024-20854","description":"Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.","status":"published","published":"2024-08-05T14:21:18Z","modified":"2024-08-05T15:02:35Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:15.955222Z"}],"ghsa":[{"id":"GHSA-jfgv-r9x2-7mhr","title":"Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR...","description":"Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.","status":"published","published":"2024-08-05T15:30:53Z","modified":"2024-08-05T15:30:57Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:57:51.247803Z"}],"nvd":[{"id":"CVE-2024-23350","description":"Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.","status":"published","published":"2024-08-05T15:15:45.96Z","modified":"2026-06-17T07:12:39.027Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:10:17.832118Z"}]}}