CVE-2024-49846 - Vulnerability Details

Vendors	Products
Qualcomm	Ar8035 Ar8035 Firmware Fastconnect 7800 Fastconnect 7800 Firmware Qca6574au Qca6574au Firmware Qca6595au Qca6595au Firmware Qca6678aq Qca6678aq Firmware Qca6688aq Qca6688aq Firmware Qca6698aq Qca6698aq Firmware Qca8081 Qca8081 Firmware Qca8337 Qca8337 Firmware Qcc710 Qcc710 Firmware Qcn6224 Qcn6224 Firmware Qcn6274 Qcn6274 Firmware Qfw7114 Qfw7114 Firmware Qfw7124 Qfw7124 Firmware Sdx80m Sdx80m Firmware Sm8750 Sm8750 Firmware Sm8750p Sm8750p Firmware Snapdragon Auto 5g Modem-rf Gen 2 Snapdragon Auto 5g Modem-rf Gen 2 Firmware Snapdragon W5\+ Gen 1 Wearable Snapdragon W5\+ Gen 1 Wearable Firmware Snapdragon X72 5g Modem-rf System Snapdragon X72 5g Modem-rf System Firmware Snapdragon X75 5g Modem-rf System Snapdragon X75 5g Modem-rf System Firmware Sw5100 Sw5100 Firmware Sw5100p Sw5100p Firmware Wcd9340 Wcd9340 Firmware Wcd9395 Wcd9395 Firmware Wsa8830 Wsa8830 Firmware Wsa8832 Wsa8832 Firmware Wsa8835 Wsa8835 Firmware Wsa8840 Wsa8840 Firmware Wsa8845 Wsa8845 Firmware Wsa8845h Wsa8845h Firmware

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-49846", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2024-10-20T17:18:43.218Z", "datePublished": "2025-05-06T08:32:23.580Z", "dateUpdated": "2025-05-06T15:52:55.077Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Auto", "Snapdragon MDM", "Snapdragon Mobile", "Snapdragon WBC", "Snapdragon Wearables"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "AR8035"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "QCA6574AU"}, {"status": "affected", "version": "QCA6595AU"}, {"status": "affected", "version": "QCA6678AQ"}, {"status": "affected", "version": "QCA6688AQ"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "QCA8081"}, {"status": "affected", "version": "QCA8337"}, {"status": "affected", "version": "QCC710"}, {"status": "affected", "version": "QCN6224"}, {"status": "affected", "version": "QCN6274"}, {"status": "affected", "version": "QFW7114"}, {"status": "affected", "version": "QFW7124"}, {"status": "affected", "version": "SDX80M"}, {"status": "affected", "version": "SM8750"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2"}, {"status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform"}, {"status": "affected", "version": "Snapdragon X72 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X75 5G Modem-RF System"}, {"status": "affected", "version": "SW5100"}, {"status": "affected", "version": "SW5100P"}, {"status": "affected", "version": "WCD9340"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8832"}, {"status": "affected", "version": "WSA8835"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption while decoding of OTA messages from T3448 IE."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-126", "description": "CWE-126 Buffer Over-read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-05-06T08:32:23.580Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html"}], "title": "Buffer Over-read in Multi-Mode Call Processor"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-06T15:48:05.747218Z", "id": "CVE-2024-49846", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-06T15:52:55.077Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-49846 (string)

assignerOrgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

state : PUBLISHED (string)

assignerShortName : qualcomm (string)

dateReserved : 2024-10-20T17:18:43.218Z (string)

datePublished : 2025-05-06T08:32:23.580Z (string)

dateUpdated : 2025-05-06T15:52:55.077Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

platforms : [ »

0 : Snapdragon Auto (string)

1 : Snapdragon MDM (string)

2 : Snapdragon Mobile (string)

3 : Snapdragon WBC (string)

4 : Snapdragon Wearables (string)

]

product : Snapdragon (string)

vendor : Qualcomm, Inc. (string)

versions : [ »

0 : { »

status : affected (string)

version : AR8035 (string)

}

1 : { »

status : affected (string)

version : FastConnect 7800 (string)

}

2 : { »

status : affected (string)

version : QCA6574AU (string)

}

3 : { »

status : affected (string)

version : QCA6595AU (string)

}

4 : { »

status : affected (string)

version : QCA6678AQ (string)

}

5 : { »

status : affected (string)

version : QCA6688AQ (string)

}

6 : { »

status : affected (string)

version : QCA6698AQ (string)

}

7 : { »

status : affected (string)

version : QCA8081 (string)

}

8 : { »

status : affected (string)

version : QCA8337 (string)

}

9 : { »

status : affected (string)

version : QCC710 (string)

}

10 : { »

status : affected (string)

version : QCN6224 (string)

}

11 : { »

status : affected (string)

version : QCN6274 (string)

}

12 : { »

status : affected (string)

version : QFW7114 (string)

}

13 : { »

status : affected (string)

version : QFW7124 (string)

}

14 : { »

status : affected (string)

version : SDX80M (string)

}

15 : { »

status : affected (string)

version : SM8750 (string)

}

16 : { »

status : affected (string)

version : SM8750P (string)

}

17 : { »

status : affected (string)

version : Snapdragon Auto 5G Modem-RF Gen 2 (string)

}

18 : { »

status : affected (string)

version : Snapdragon W5+ Gen 1 Wearable Platform (string)

}

19 : { »

status : affected (string)

version : Snapdragon X72 5G Modem-RF System (string)

}

20 : { »

status : affected (string)

version : Snapdragon X75 5G Modem-RF System (string)

}

21 : { »

status : affected (string)

version : SW5100 (string)

}

22 : { »

status : affected (string)

version : SW5100P (string)

}

23 : { »

status : affected (string)

version : WCD9340 (string)

}

24 : { »

status : affected (string)

version : WCD9395 (string)

}

25 : { »

status : affected (string)

version : WSA8830 (string)

}

26 : { »

status : affected (string)

version : WSA8832 (string)

}

27 : { »

status : affected (string)

version : WSA8835 (string)

}

28 : { »

status : affected (string)

version : WSA8840 (string)

}

29 : { »

status : affected (string)

version : WSA8845 (string)

}

30 : { »

status : affected (string)

version : WSA8845H (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Memory corruption while decoding of OTA messages from T3448 IE. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 8.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-126 (string)

description : CWE-126 Buffer Over-read (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

shortName : qualcomm (string)

dateUpdated : 2025-05-06T08:32:23.580Z (string)

}

references : [ »

0 : { »

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html (string)

}

]

title : Buffer Over-read in Multi-Mode Call Processor (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-05-06T15:48:05.747218Z (string)

id : CVE-2024-49846 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-06T15:52:55.077Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-49846", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-06T15:48:05.747218Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-06T15:50:05.045Z"}}], "cna": {"title": "Buffer Over-read in Multi-Mode Call Processor", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "AR8035"}, {"status": "affected", "version": "FastConnect 7800"}, {"status": "affected", "version": "QCA6574AU"}, {"status": "affected", "version": "QCA6595AU"}, {"status": "affected", "version": "QCA6678AQ"}, {"status": "affected", "version": "QCA6688AQ"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "QCA8081"}, {"status": "affected", "version": "QCA8337"}, {"status": "affected", "version": "QCC710"}, {"status": "affected", "version": "QCN6224"}, {"status": "affected", "version": "QCN6274"}, {"status": "affected", "version": "QFW7114"}, {"status": "affected", "version": "QFW7124"}, {"status": "affected", "version": "SDX80M"}, {"status": "affected", "version": "SM8750"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2"}, {"status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform"}, {"status": "affected", "version": "Snapdragon X72 5G Modem-RF System"}, {"status": "affected", "version": "Snapdragon X75 5G Modem-RF System"}, {"status": "affected", "version": "SW5100"}, {"status": "affected", "version": "SW5100P"}, {"status": "affected", "version": "WCD9340"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8832"}, {"status": "affected", "version": "WSA8835"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}], "platforms": ["Snapdragon Auto", "Snapdragon MDM", "Snapdragon Mobile", "Snapdragon WBC", "Snapdragon Wearables"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Memory corruption while decoding of OTA messages from T3448 IE."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-126", "description": "CWE-126 Buffer Over-read"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-05-06T08:32:23.580Z"}}}, "cveMetadata": {"cveId": "CVE-2024-49846", "state": "PUBLISHED", "dateUpdated": "2025-05-06T15:52:55.077Z", "dateReserved": "2024-10-20T17:18:43.218Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2025-05-06T08:32:23.580Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-49846 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-05-06T15:48:05.747218Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-06T15:50:05.045Z (string)

}

]

cna : { »

title : Buffer Over-read in Multi-Mode Call Processor (string)

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 8.2 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Qualcomm, Inc. (string)

product : Snapdragon (string)

versions : [ »

0 : { »

status : affected (string)

version : AR8035 (string)

}

1 : { »

status : affected (string)

version : FastConnect 7800 (string)

}

2 : { »

status : affected (string)

version : QCA6574AU (string)

}

3 : { »

status : affected (string)

version : QCA6595AU (string)

}

4 : { »

status : affected (string)

version : QCA6678AQ (string)

}

5 : { »

status : affected (string)

version : QCA6688AQ (string)

}

6 : { »

status : affected (string)

version : QCA6698AQ (string)

}

7 : { »

status : affected (string)

version : QCA8081 (string)

}

8 : { »

status : affected (string)

version : QCA8337 (string)

}

9 : { »

status : affected (string)

version : QCC710 (string)

}

10 : { »

status : affected (string)

version : QCN6224 (string)

}

11 : { »

status : affected (string)

version : QCN6274 (string)

}

12 : { »

status : affected (string)

version : QFW7114 (string)

}

13 : { »

status : affected (string)

version : QFW7124 (string)

}

14 : { »

status : affected (string)

version : SDX80M (string)

}

15 : { »

status : affected (string)

version : SM8750 (string)

}

16 : { »

status : affected (string)

version : SM8750P (string)

}

17 : { »

status : affected (string)

version : Snapdragon Auto 5G Modem-RF Gen 2 (string)

}

18 : { »

status : affected (string)

version : Snapdragon W5+ Gen 1 Wearable Platform (string)

}

19 : { »

status : affected (string)

version : Snapdragon X72 5G Modem-RF System (string)

}

20 : { »

status : affected (string)

version : Snapdragon X75 5G Modem-RF System (string)

}

21 : { »

status : affected (string)

version : SW5100 (string)

}

22 : { »

status : affected (string)

version : SW5100P (string)

}

23 : { »

status : affected (string)

version : WCD9340 (string)

}

24 : { »

status : affected (string)

version : WCD9395 (string)

}

25 : { »

status : affected (string)

version : WSA8830 (string)

}

26 : { »

status : affected (string)

version : WSA8832 (string)

}

27 : { »

status : affected (string)

version : WSA8835 (string)

}

28 : { »

status : affected (string)

version : WSA8840 (string)

}

29 : { »

status : affected (string)

version : WSA8845 (string)

}

30 : { »

status : affected (string)

version : WSA8845H (string)

}

]

platforms : [ »

0 : Snapdragon Auto (string)

1 : Snapdragon MDM (string)

2 : Snapdragon Mobile (string)

3 : Snapdragon WBC (string)

4 : Snapdragon Wearables (string)

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Memory corruption while decoding of OTA messages from T3448 IE. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-126 (string)

description : CWE-126 Buffer Over-read (string)

}

]

}

]

providerMetadata : { »

orgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

shortName : qualcomm (string)

dateUpdated : 2025-05-06T08:32:23.580Z (string)

}

cveMetadata : { »

cveId : CVE-2024-49846 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-06T15:52:55.077Z (string)

dateReserved : 2024-10-20T17:18:43.218Z (string)

assignerOrgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

datePublished : 2025-05-06T08:32:23.580Z (string)

assignerShortName : qualcomm (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AFBD264F-F24A-4CDD-B316-9514A61B91E7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6688aq:-:*:*:*:*:*:*:*", "matchCriteriaId": "94CC5BC4-011D-4D2B-8891-97FBF61FD783", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3F7853D-09EE-476F-B48D-BB30AEB4A67D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1D1C53DC-D2F3-4C92-9725-9A85340AF026", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED0585FF-E390-46E8-8701-70964A4057BB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FA8F9DA-1386-4961-B9B2-484E4347852A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*", "matchCriteriaId": "117289C8-7484-4EAE-8F35-A25768F00EED", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2A75D017-032F-4369-917C-567EE2A809F2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*", "matchCriteriaId": "107F0423-608C-404D-B58B-616A6494418F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5F4362D2-30A3-4388-ABB6-293878AD7036", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB6AE9A7-386A-473B-9BD5-DA37B1E696C5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "88376C1D-AC4D-4EB0-AF6A-274D020F5859", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*", "matchCriteriaId": "E15BA4B4-C97F-45C0-A4AD-7E46387F19A6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7456782E-B6CE-42ED-A51E-39907120E28B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*", "matchCriteriaId": "637BF4DF-BB40-479F-B696-6AD9D4B35D64", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D72C4CE0-AB59-4652-854F-94C9998F2712", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*", "matchCriteriaId": "98720774-11B8-4B4B-BC73-D4DA84E07F78", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sdx80m_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7CAE7C89-05DD-4083-9DCE-68E02F77EA69", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sdx80m:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA282402-64E3-40F7-8A26-B0922777510F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "84641A8E-A93C-48C1-86AC-193951BA4D78", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*", "matchCriteriaId": "74169A4C-0247-4719-887E-BBFB36B04F07", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D8ABDBF-BABC-4219-8A18-BDFC8C826B1F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*", "matchCriteriaId": "685D81D0-7E95-4DBA-A05B-7C708A5DFDF0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE5FCA7F-1FBE-42AA-B4E6-09CEA02A33EC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2D789BC-43F5-40FB-A191-163C01BA5FBE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A0F761E3-62F7-4A70-A3CA-09FF283ABD9C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_w5\\+_gen_1_wearable:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6136853-B719-4DA2-B6C9-C9E8EF02B35A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "205BF723-DBED-4EAE-8B5C-0E01B01E1544", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A36A7B8-CF35-4003-AC3E-C5D25288B1A1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "95A98B39-067F-4047-9ADB-7C53F18CBB7B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C462F32-0E70-472A-A42D-CD0229A97E94", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*", "matchCriteriaId": "7B8455D6-287D-4934-8E4D-F4127A9C0449", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB599A9F-0305-4FE4-8623-0F86630FEDCB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8BA28CC6-C8BB-4F50-BFE3-A59F664A4F54", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*", "matchCriteriaId": "94D2BDF1-764C-48BA-8944-3275E8768078", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7ACAD26E-B79E-4659-91A5-D301281F7D36", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C88B9C86-2E8E-4DCE-A30C-02977CC00F00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE473A5A-5CFC-4F08-A173-30717F8BD0D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*", "matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*", "matchCriteriaId": "8374DDB3-D484-4141-AE0C-42333D2721F6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "288F637F-22F8-47CF-B67F-C798A730A1BD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0996EA3-1C92-4933-BE34-9CF625E59FE7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D001127D-8160-42F0-B8B9-2FAA2976B530", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9EB615F-FD4C-450B-AB25-E936FD9816C4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Memory corruption while decoding of OTA messages from T3448 IE."}, {"lang": "es", "value": "Corrupci\u00f3n de memoria durante la decodificaci\u00f3n de mensajes OTA de T3448 IE."}], "id": "CVE-2024-49846", "lastModified": "2025-05-09T19:10:29.963", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "product-security@qualcomm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-05-06T09:15:22.510", "references": [{"source": "product-security@qualcomm.com", "tags": ["Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html"}], "sourceIdentifier": "product-security@qualcomm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-126"}], "source": "product-security@qualcomm.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AFBD264F-F24A-4CDD-B316-9514A61B91E7 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6688aq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 94CC5BC4-011D-4D2B-8891-97FBF61FD783 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B3F7853D-09EE-476F-B48D-BB30AEB4A67D (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1D1C53DC-D2F3-4C92-9725-9A85340AF026 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:* (string)

matchCriteriaId : ED0585FF-E390-46E8-8701-70964A4057BB (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FA8F9DA-1386-4961-B9B2-484E4347852A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 117289C8-7484-4EAE-8F35-A25768F00EED (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2A75D017-032F-4369-917C-567EE2A809F2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 107F0423-608C-404D-B58B-616A6494418F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5F4362D2-30A3-4388-ABB6-293878AD7036 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB6AE9A7-386A-473B-9BD5-DA37B1E696C5 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 88376C1D-AC4D-4EB0-AF6A-274D020F5859 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E15BA4B4-C97F-45C0-A4AD-7E46387F19A6 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

7 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7456782E-B6CE-42ED-A51E-39907120E28B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 637BF4DF-BB40-479F-B696-6AD9D4B35D64 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

8 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D72C4CE0-AB59-4652-854F-94C9998F2712 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 98720774-11B8-4B4B-BC73-D4DA84E07F78 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

9 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sdx80m_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7CAE7C89-05DD-4083-9DCE-68E02F77EA69 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sdx80m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BA282402-64E3-40F7-8A26-B0922777510F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

10 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 84641A8E-A93C-48C1-86AC-193951BA4D78 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 74169A4C-0247-4719-887E-BBFB36B04F07 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

11 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D8ABDBF-BABC-4219-8A18-BDFC8C826B1F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 685D81D0-7E95-4DBA-A05B-7C708A5DFDF0 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

12 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EE5FCA7F-1FBE-42AA-B4E6-09CEA02A33EC (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E2D789BC-43F5-40FB-A191-163C01BA5FBE (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

13 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A0F761E3-62F7-4A70-A3CA-09FF283ABD9C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F6136853-B719-4DA2-B6C9-C9E8EF02B35A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

14 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 205BF723-DBED-4EAE-8B5C-0E01B01E1544 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9A36A7B8-CF35-4003-AC3E-C5D25288B1A1 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

15 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 95A98B39-067F-4047-9ADB-7C53F18CBB7B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C462F32-0E70-472A-A42D-CD0229A97E94 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

16 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B8455D6-287D-4934-8E4D-F4127A9C0449 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

17 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DB599A9F-0305-4FE4-8623-0F86630FEDCB (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EEB883BF-68B2-4C25-84DC-5DA953BFAA2F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

18 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8BA28CC6-C8BB-4F50-BFE3-A59F664A4F54 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 94D2BDF1-764C-48BA-8944-3275E8768078 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

19 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 699056F6-1517-4F25-AE07-4FFCF6923B9F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E4C023D2-6FF5-4FFC-B9F2-895979166580 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

20 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11B69595-E488-4590-A150-CE5BE08B5E13 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF680174-5FA6-47D9-8EAB-CC2A37A7BD42 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

21 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7ACAD26E-B79E-4659-91A5-D301281F7D36 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

22 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F80BC68E-7476-4A40-9F48-53722FE9A5BF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B36F4B2-BAA3-45AD-9967-0EB482C99708 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

23 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CA33DE15-C177-43B3-AD50-FF797753D12E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AE1A5841-5BCB-4033-ACB9-23F3FCA65309 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

24 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5B47BF35-3AA0-4667-842E-19B0FE30BF3C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8A071672-9405-4418-9141-35CEADBB65AF (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

25 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB7CF473-8B25-4851-91F2-1BD693CCDC85 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 91E591F2-8F72-4A5A-9264-2742EB2DABDA (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

26 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C88B9C86-2E8E-4DCE-A30C-02977CC00F00 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EE473A5A-5CFC-4F08-A173-30717F8BD0D7 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

27 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 638DBC7F-456F-487D-BED2-2214DFF8BEE2 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

28 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D527E2B1-2A46-4FBA-9F7A-F5543677C8FB (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8374DDB3-D484-4141-AE0C-42333D2721F6 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

29 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 288F637F-22F8-47CF-B67F-C798A730A1BD (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D0996EA3-1C92-4933-BE34-9CF625E59FE7 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

30 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D001127D-8160-42F0-B8B9-2FAA2976B530 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C9EB615F-FD4C-450B-AB25-E936FD9816C4 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Memory corruption while decoding of OTA messages from T3448 IE. (string)

}

1 : { »

lang : es (string)

value : Corrupción de memoria durante la decodificación de mensajes OTA de T3448 IE. (string)

}

]

id : CVE-2024-49846 (string)

lastModified : 2025-05-09T19:10:29.963 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 8.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 4.2 (number)

source : product-security@qualcomm.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.1 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.2 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-05-06T09:15:22.510 (string)

references : [ »

0 : { »

source : product-security@qualcomm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html (string)

}

]

sourceIdentifier : product-security@qualcomm.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-126 (string)

}

]

source : product-security@qualcomm.com (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-125 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm ar8035 Qualcomm ar8035 Firmware Qualcomm fastconnect 7800 Qualcomm fastconnect 7800 Firmware Qualcomm qca6574au Qualcomm qca6574au Firmware Qualcomm qca6595au Qualcomm qca6595au Firmware Qualcomm qca6678aq Qualcomm qca6678aq Firmware Qualcomm qca6688aq Qualcomm qca6688aq Firmware Qualcomm qca6698aq Qualcomm qca6698aq Firmware Qualcomm qca8081 Qualcomm qca8081 Firmware Qualcomm qca8337 Qualcomm qca8337 Firmware Qualcomm qcc710 Qualcomm qcc710 Firmware Qualcomm qcn6224 Qualcomm qcn6224 Firmware Qualcomm qcn6274 Qualcomm qcn6274 Firmware Qualcomm qfw7114 Qualcomm qfw7114 Firmware Qualcomm qfw7124 Qualcomm qfw7124 Firmware Qualcomm sdx80m Qualcomm sdx80m Firmware Qualcomm sm8750 Qualcomm sm8750 Firmware Qualcomm sm8750p Qualcomm sm8750p Firmware Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware Qualcomm snapdragon W5\+ Gen 1 Wearable Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware Qualcomm snapdragon X72 5g Modem-rf System Qualcomm snapdragon X72 5g Modem-rf System Firmware Qualcomm snapdragon X75 5g Modem-rf System Qualcomm snapdragon X75 5g Modem-rf System Firmware Qualcomm sw5100 Qualcomm sw5100 Firmware Qualcomm sw5100p Qualcomm sw5100p Firmware Qualcomm wcd9340 Qualcomm wcd9340 Firmware Qualcomm wcd9395 Qualcomm wcd9395 Firmware Qualcomm wsa8830 Qualcomm wsa8830 Firmware Qualcomm wsa8832 Qualcomm wsa8832 Firmware Qualcomm wsa8835 Qualcomm wsa8835 Firmware Qualcomm wsa8840 Qualcomm wsa8840 Firmware Qualcomm wsa8845 Qualcomm wsa8845 Firmware Qualcomm wsa8845h Qualcomm wsa8845h Firmware
Weaknesses		CWE-125
CPEs		cpe:2.3:h:qualcomm:ar8035:-:::::::* cpe:2.3:h:qualcomm:fastconnect_7800:-:::::::* cpe:2.3:h:qualcomm:qca6574au:-:::::::* cpe:2.3:h:qualcomm:qca6595au:-:::::::* cpe:2.3:h:qualcomm:qca6678aq:-:::::::* cpe:2.3:h:qualcomm:qca6688aq:-:::::::* cpe:2.3:h:qualcomm:qca6698aq:-:::::::* cpe:2.3:h:qualcomm:qca8081:-:::::::* cpe:2.3:h:qualcomm:qca8337:-:::::::* cpe:2.3:h:qualcomm:qcc710:-:::::::* cpe:2.3:h:qualcomm:qcn6224:-:::::::* cpe:2.3:h:qualcomm:qcn6274:-:::::::* cpe:2.3:h:qualcomm:qfw7114:-:::::::* cpe:2.3:h:qualcomm:qfw7124:-:::::::* cpe:2.3:h:qualcomm:sdx80m:-:::::::* cpe:2.3:h:qualcomm:sm8750:-:::::::* cpe:2.3:h:qualcomm:sm8750p:-:::::::* cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:::::::* cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:::::::* cpe:2.3:h:qualcomm:sw5100:-:::::::* cpe:2.3:h:qualcomm:sw5100p:-:::::::* cpe:2.3:h:qualcomm:wcd9340:-:::::::* cpe:2.3:h:qualcomm:wcd9395:-:::::::* cpe:2.3:h:qualcomm:wsa8830:-:::::::* cpe:2.3:h:qualcomm:wsa8832:-:::::::* cpe:2.3:h:qualcomm:wsa8835:-:::::::* cpe:2.3:h:qualcomm:wsa8840:-:::::::* cpe:2.3:h:qualcomm:wsa8845:-:::::::* cpe:2.3:h:qualcomm:wsa8845h:-:::::::* cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::* cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6595au_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6678aq_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6688aq_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6698aq_firmware:-:::::::* cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::* cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::* cpe:2.3:o:qualcomm:qcc710_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn6224_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn6274_firmware:-:::::::* cpe:2.3:o:qualcomm:qfw7114_firmware:-:::::::* cpe:2.3:o:qualcomm:qfw7124_firmware:-:::::::* cpe:2.3:o:qualcomm:sdx80m_firmware:-:::::::* cpe:2.3:o:qualcomm:sm8750_firmware:-:::::::* cpe:2.3:o:qualcomm:sm8750p_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:::::::* cpe:2.3:o:qualcomm:sw5100_firmware:-:::::::* cpe:2.3:o:qualcomm:sw5100p_firmware:-:::::::* cpe:2.3:o:qualcomm:wcd9340_firmware:-:::::::* cpe:2.3:o:qualcomm:wcd9395_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8832_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8840_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8845_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8845h_firmware:-:::::::*
Vendors & Products		Qualcomm Qualcomm ar8035 Qualcomm ar8035 Firmware Qualcomm fastconnect 7800 Qualcomm fastconnect 7800 Firmware Qualcomm qca6574au Qualcomm qca6574au Firmware Qualcomm qca6595au Qualcomm qca6595au Firmware Qualcomm qca6678aq Qualcomm qca6678aq Firmware Qualcomm qca6688aq Qualcomm qca6688aq Firmware Qualcomm qca6698aq Qualcomm qca6698aq Firmware Qualcomm qca8081 Qualcomm qca8081 Firmware Qualcomm qca8337 Qualcomm qca8337 Firmware Qualcomm qcc710 Qualcomm qcc710 Firmware Qualcomm qcn6224 Qualcomm qcn6224 Firmware Qualcomm qcn6274 Qualcomm qcn6274 Firmware Qualcomm qfw7114 Qualcomm qfw7114 Firmware Qualcomm qfw7124 Qualcomm qfw7124 Firmware Qualcomm sdx80m Qualcomm sdx80m Firmware Qualcomm sm8750 Qualcomm sm8750 Firmware Qualcomm sm8750p Qualcomm sm8750p Firmware Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware Qualcomm snapdragon W5\+ Gen 1 Wearable Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware Qualcomm snapdragon X72 5g Modem-rf System Qualcomm snapdragon X72 5g Modem-rf System Firmware Qualcomm snapdragon X75 5g Modem-rf System Qualcomm snapdragon X75 5g Modem-rf System Firmware Qualcomm sw5100 Qualcomm sw5100 Firmware Qualcomm sw5100p Qualcomm sw5100p Firmware Qualcomm wcd9340 Qualcomm wcd9340 Firmware Qualcomm wcd9395 Qualcomm wcd9395 Firmware Qualcomm wsa8830 Qualcomm wsa8830 Firmware Qualcomm wsa8832 Qualcomm wsa8832 Firmware Qualcomm wsa8835 Qualcomm wsa8835 Firmware Qualcomm wsa8840 Qualcomm wsa8840 Firmware Qualcomm wsa8845 Qualcomm wsa8845 Firmware Qualcomm wsa8845h Qualcomm wsa8845h Firmware

Type	Values Removed	Values Added
Description		Memory corruption while decoding of OTA messages from T3448 IE.
Title		Buffer Over-read in Multi-Mode Call Processor
Weaknesses		CWE-126
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
Metrics		cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L'}`

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object