CVE-2023-24855

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6391; QCA8081; QCA8337; QCC710; QCM4490; QCM6490; QCM8550; QCN6024; QCN6224; QCN6274; QCN9024; QCS4490; QCS6490; QCS8550; QFW7114

References

Timeline

Published
Oct 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-248567.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-248576.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-248587.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-248597.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2023-248607.5Microsoft Defender Denial of Service VulnerabilityCVE-2023-248617.0Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2023-248625.5Windows Secure Channel Denial of Service VulnerabilityCVE-2023-248636.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-248648.8Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege VulnerabilityCVE-2023-248656.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-248666.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-248678.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24855: Critical severity, CVSS 9.8 | Vulnix