CVE-2024-23350

{"id": "CVE-2024-23350", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-08-05T15:15:45.960", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html", "source": "product-security@qualcomm.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network."}, {"lang": "es", "value": "DOS permanente cuando el transporte DL NAS recibe m\u00faltiples payloads, de modo que un payload contiene un contenedor SOR cuya verificaci\u00f3n de integridad fall\u00f3 y la otra es LPP donde UE necesita enviar un mensaje de estado a la red."}], "lastModified": "2024-08-06T16:30:24.547", "sourceIdentifier": "product-security@qualcomm.com"}