{"answers":{"affected":"It affects 235 products.","exploited":"There is no known exploitation of CVE-2024-38408 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2024-38408 yet. Limit exposure of the affected software until one is available.","what":"CVE-2024-38408 is a high-severity vulnerability in Qualcomm 315 5g Iot Modem Firmware, published on 4 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2024-38408 and fix it if it is affected.\n\nWhat it is: CVE-2024-38408 is a high-severity vulnerability in Qualcomm 315 5g Iot Modem Firmware, published on 4 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2024-38408 in the wild and no public exploit code.\n\nAffected product: Qualcomm 315 5g Iot Modem Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2024-38408/ (Markdown: https://insights.sbomify.com/CVE-2024-38408/index.md)","id":"CVE-2024-38408","markdown":"https://insights.sbomify.com/CVE-2024-38408/index.md","name":"CVE-2024-38408","record":{"aliases":["GHSA-wqm7-xh9j-c3ff"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["security_bypass"],"network_reachable":"yes","non_default_config":false,"product_category":"Snapdragon Bluetooth controller","requires_auth":"none","summary":"A cryptographic flaw in the Bluetooth controller allows bypassing encryption when receiving unexpected LMP commands, affecting Snapdragon devices.","user_interaction":"not_required","vuln_class":"weak_cryptography"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"qualcomm","cpe":[{"product":"315_5g_iot_modem_firmware","vendor":"qualcomm"},{"product":"aqt1000_firmware","vendor":"qualcomm"},{"product":"ar8035_firmware","vendor":"qualcomm"},{"product":"csrb31024_firmware","vendor":"qualcomm"},{"product":"fastconnect_6200_firmware","vendor":"qualcomm"},{"product":"fastconnect_6700_firmware","vendor":"qualcomm"},{"product":"fastconnect_6800_firmware","vendor":"qualcomm"},{"product":"fastconnect_6900_firmware","vendor":"qualcomm"},{"product":"fastconnect_7800_firmware","vendor":"qualcomm"},{"product":"flight_rb5_5g_platform_firmware","vendor":"qualcomm"},{"product":"immersive_home_214_platform_firmware","vendor":"qualcomm"},{"product":"immersive_home_216_platform_firmware","vendor":"qualcomm"},{"product":"immersive_home_316_platform_firmware","vendor":"qualcomm"},{"product":"immersive_home_318_platform_firmware","vendor":"qualcomm"},{"product":"ipq5010_firmware","vendor":"qualcomm"},{"product":"ipq5028_firmware","vendor":"qualcomm"},{"product":"qam8255p_firmware","vendor":"qualcomm"},{"product":"qam8295p_firmware","vendor":"qualcomm"},{"product":"qam8620p_firmware","vendor":"qualcomm"},{"product":"qam8650p_firmware","vendor":"qualcomm"},{"product":"qam8775p_firmware","vendor":"qualcomm"},{"product":"qamsrv1h_firmware","vendor":"qualcomm"},{"product":"qamsrv1m_firmware","vendor":"qualcomm"},{"product":"qca1062_firmware","vendor":"qualcomm"},{"product":"qca1064_firmware","vendor":"qualcomm"},{"product":"qca2062_firmware","vendor":"qualcomm"},{"product":"qca2064_firmware","vendor":"qualcomm"},{"product":"qca2065_firmware","vendor":"qualcomm"},{"product":"qca2066_firmware","vendor":"qualcomm"},{"product":"qca6174a_firmware","vendor":"qualcomm"},{"product":"qca6175a_firmware","vendor":"qualcomm"},{"product":"qca6391_firmware","vendor":"qualcomm"},{"product":"qca6420_firmware","vendor":"qualcomm"},{"product":"qca6421_firmware","vendor":"qualcomm"},{"product":"qca6426_firmware","vendor":"qualcomm"},{"product":"qca6430_firmware","vendor":"qualcomm"},{"product":"qca6431_firmware","vendor":"qualcomm"},{"product":"qca6436_firmware","vendor":"qualcomm"},{"product":"qca6554a_firmware","vendor":"qualcomm"},{"product":"qca6564au_firmware","vendor":"qualcomm"},{"product":"qca6574_firmware","vendor":"qualcomm"},{"product":"qca6574a_firmware","vendor":"qualcomm"},{"product":"qca6574au_firmware","vendor":"qualcomm"},{"product":"qca6584au_firmware","vendor":"qualcomm"},{"product":"qca6595_firmware","vendor":"qualcomm"},{"product":"qca6595au_firmware","vendor":"qualcomm"},{"product":"qca6678aq_firmware","vendor":"qualcomm"},{"product":"qca6688aq_firmware","vendor":"qualcomm"},{"product":"qca6696_firmware","vendor":"qualcomm"},{"product":"qca6698aq_firmware","vendor":"qualcomm"},{"product":"qca6777aq_firmware","vendor":"qualcomm"},{"product":"qca6787aq_firmware","vendor":"qualcomm"},{"product":"qca6797aq_firmware","vendor":"qualcomm"},{"product":"qca8081_firmware","vendor":"qualcomm"},{"product":"qca8337_firmware","vendor":"qualcomm"},{"product":"qcc2073_firmware","vendor":"qualcomm"},{"product":"qcc2076_firmware","vendor":"qualcomm"},{"product":"qcc710_firmware","vendor":"qualcomm"},{"product":"qcc711_firmware","vendor":"qualcomm"},{"product":"qcc7225_firmware","vendor":"qualcomm"},{"product":"qcc7226_firmware","vendor":"qualcomm"},{"product":"qcc7228_firmware","vendor":"qualcomm"},{"product":"qcm4490_firmware","vendor":"qualcomm"},{"product":"qcm5430_firmware","vendor":"qualcomm"},{"product":"qcm6125_firmware","vendor":"qualcomm"},{"product":"qcm6490_firmware","vendor":"qualcomm"},{"product":"qcm8550_firmware","vendor":"qualcomm"},{"product":"qcn6023_firmware","vendor":"qualcomm"},{"product":"qcn6024_firmware","vendor":"qualcomm"},{"product":"qcn6100_firmware","vendor":"qualcomm"},{"product":"qcn6102_firmware","vendor":"qualcomm"},{"product":"qcn6112_firmware","vendor":"qualcomm"},{"product":"qcn6122_firmware","vendor":"qualcomm"},{"product":"qcn6132_firmware","vendor":"qualcomm"},{"product":"qcn6224_firmware","vendor":"qualcomm"},{"product":"qcn6274_firmware","vendor":"qualcomm"},{"product":"qcn7605_firmware","vendor":"qualcomm"},{"product":"qcn7606_firmware","vendor":"qualcomm"},{"product":"qcn9000_firmware","vendor":"qualcomm"},{"product":"qcn9001_firmware","vendor":"qualcomm"},{"product":"qcn9002_firmware","vendor":"qualcomm"},{"product":"qcn9003_firmware","vendor":"qualcomm"},{"product":"qcn9011_firmware","vendor":"qualcomm"},{"product":"qcn9012_firmware","vendor":"qualcomm"},{"product":"qcn9022_firmware","vendor":"qualcomm"},{"product":"qcn9024_firmware","vendor":"qualcomm"},{"product":"qcn9070_firmware","vendor":"qualcomm"},{"product":"qcn9072_firmware","vendor":"qualcomm"},{"product":"qcn9074_firmware","vendor":"qualcomm"},{"product":"qcn9100_firmware","vendor":"qualcomm"},{"product":"qcn9274_firmware","vendor":"qualcomm"},{"product":"qcs4490_firmware","vendor":"qualcomm"},{"product":"qcs5430_firmware","vendor":"qualcomm"},{"product":"qcs6125_firmware","vendor":"qualcomm"},{"product":"qcs6490_firmware","vendor":"qualcomm"},{"product":"qcs7230_firmware","vendor":"qualcomm"},{"product":"qcs8250_firmware","vendor":"qualcomm"},{"product":"qcs8550_firmware","vendor":"qualcomm"},{"product":"qcs9100_firmware","vendor":"qualcomm"},{"product":"qep8111_firmware","vendor":"qualcomm"},{"product":"qfw7114_firmware","vendor":"qualcomm"},{"product":"qfw7124_firmware","vendor":"qualcomm"},{"product":"qrb5165m_firmware","vendor":"qualcomm"},{"product":"qrb5165n_firmware","vendor":"qualcomm"},{"product":"qsm8250_firmware","vendor":"qualcomm"},{"product":"qsm8350_firmware","vendor":"qualcomm"},{"product":"robotics_rb5_platform_firmware","vendor":"qualcomm"},{"product":"sa4150p_firmware","vendor":"qualcomm"},{"product":"sa4155p_firmware","vendor":"qualcomm"},{"product":"sa6145p_firmware","vendor":"qualcomm"},{"product":"sa6150p_firmware","vendor":"qualcomm"},{"product":"sa6155_firmware","vendor":"qualcomm"},{"product":"sa6155p_firmware","vendor":"qualcomm"},{"product":"sa7255p_firmware","vendor":"qualcomm"},{"product":"sa7775p_firmware","vendor":"qualcomm"},{"product":"sa8145p_firmware","vendor":"qualcomm"},{"product":"sa8150p_firmware","vendor":"qualcomm"},{"product":"sa8155_firmware","vendor":"qualcomm"},{"product":"sa8155p_firmware","vendor":"qualcomm"},{"product":"sa8195p_firmware","vendor":"qualcomm"},{"product":"sa8255p_firmware","vendor":"qualcomm"},{"product":"sa8295p_firmware","vendor":"qualcomm"},{"product":"sa8620p_firmware","vendor":"qualcomm"},{"product":"sa8650p_firmware","vendor":"qualcomm"},{"product":"sa8770p_firmware","vendor":"qualcomm"},{"product":"sa8775p_firmware","vendor":"qualcomm"},{"product":"sa9000p_firmware","vendor":"qualcomm"},{"product":"sc8180x\\+sdx55_firmware","vendor":"qualcomm"},{"product":"sc8380xp_firmware","vendor":"qualcomm"},{"product":"sd855_firmware","vendor":"qualcomm"},{"product":"sd865_5g_firmware","vendor":"qualcomm"},{"product":"sd888_firmware","vendor":"qualcomm"},{"product":"sd_8_gen1_5g_firmware","vendor":"qualcomm"},{"product":"sdx55_firmware","vendor":"qualcomm"},{"product":"sdx61_firmware","vendor":"qualcomm"},{"product":"sg8275p_firmware","vendor":"qualcomm"},{"product":"sm6250_firmware","vendor":"qualcomm"},{"product":"sm6250p_firmware","vendor":"qualcomm"},{"product":"sm6370_firmware","vendor":"qualcomm"},{"product":"sm7250p_firmware","vendor":"qualcomm"},{"product":"sm7315_firmware","vendor":"qualcomm"},{"product":"sm7325p_firmware","vendor":"qualcomm"},{"product":"sm8550p_firmware","vendor":"qualcomm"},{"product":"sm8635_firmware","vendor":"qualcomm"},{"product":"sm8750_firmware","vendor":"qualcomm"},{"product":"sm8750p_firmware","vendor":"qualcomm"},{"product":"snapdragon_480\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_480_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_4_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_690_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_695_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_720g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_750g_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_765_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_765g_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_768g_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_778g\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_778g_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_780g_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_782g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_7c\\+_gen_3_compute_firmware","vendor":"qualcomm"},{"product":"snapdragon_7c_compute_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_7c_gen_2_compute_platform_\\(sc7180-ad\\)_\\\"rennell_pro\\\"_firmware","vendor":"qualcomm"},{"product":"snapdragon_855\\+\\/860_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_855_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_865\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_865_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_870_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_888\\+_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_888_5g_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8\\+_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8\\+_gen_2_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_1_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_2_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8_gen_3_mobile_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_8c_compute_platform_\\(sc8180x-ad\\)_\\\"poipu_lite\\\"_firmware","vendor":"qualcomm"},{"product":"snapdragon_8c_compute_platform_\\(sc8180xp-ad\\)_\\\"poipu_lite\\\"_firmware","vendor":"qualcomm"},{"product":"snapdragon_8cx_compute_platform_\\(sc8180x-aa\\,_ab\\)_firmware","vendor":"qualcomm"},{"product":"snapdragon_8cx_compute_platform_\\(sc8180xp-ac\\,_af\\)_\\\"poipu_pro\\\"_firmware","vendor":"qualcomm"},{"product":"snapdragon_8cx_gen_2_5g_compute_platform_\\(sc8180x-ac\\,_af\\)_\\\"poipu_pro\\\"_firmware","vendor":"qualcomm"},{"product":"snapdragon_8cx_gen_2_5g_compute_platform_\\(sc8180xp-aa\\,_ab\\)_firmware","vendor":"qualcomm"},{"product":"snapdragon_8cx_gen_3_compute_platform_\\(sc8280xp-ab\\,_bb\\)_firmware","vendor":"qualcomm"},{"product":"snapdragon_ar2_gen_1_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_auto_4g_modem_firmware","vendor":"qualcomm"},{"product":"snapdragon_auto_5g_modem-rf_firmware","vendor":"qualcomm"},{"product":"snapdragon_auto_5g_modem-rf_gen_2_firmware","vendor":"qualcomm"},{"product":"snapdragon_w5\\+_gen_1_wearable_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_x35_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x55_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x62_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x65_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x72_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_x75_5g_modem-rf_system_firmware","vendor":"qualcomm"},{"product":"snapdragon_xr2\\+_gen_1_platform_firmware","vendor":"qualcomm"},{"product":"snapdragon_xr2_5g_platform_firmware","vendor":"qualcomm"},{"product":"srv1h_firmware","vendor":"qualcomm"},{"product":"srv1l_firmware","vendor":"qualcomm"},{"product":"srv1m_firmware","vendor":"qualcomm"},{"product":"ssg2115p_firmware","vendor":"qualcomm"},{"product":"ssg2125p_firmware","vendor":"qualcomm"},{"product":"sw5100_firmware","vendor":"qualcomm"},{"product":"sw5100p_firmware","vendor":"qualcomm"},{"product":"sxr1230p_firmware","vendor":"qualcomm"},{"product":"sxr2130_firmware","vendor":"qualcomm"},{"product":"sxr2230p_firmware","vendor":"qualcomm"},{"product":"sxr2250p_firmware","vendor":"qualcomm"},{"product":"video_collaboration_vc1_platform_firmware","vendor":"qualcomm"},{"product":"video_collaboration_vc3_platform_firmware","vendor":"qualcomm"},{"product":"video_collaboration_vc5_platform_firmware","vendor":"qualcomm"},{"product":"wcd9340_firmware","vendor":"qualcomm"},{"product":"wcd9341_firmware","vendor":"qualcomm"},{"product":"wcd9360_firmware","vendor":"qualcomm"},{"product":"wcd9370_firmware","vendor":"qualcomm"},{"product":"wcd9375_firmware","vendor":"qualcomm"},{"product":"wcd9380_firmware","vendor":"qualcomm"},{"product":"wcd9385_firmware","vendor":"qualcomm"},{"product":"wcd9390_firmware","vendor":"qualcomm"},{"product":"wcd9395_firmware","vendor":"qualcomm"},{"product":"wcn3950_firmware","vendor":"qualcomm"},{"product":"wcn3980_firmware","vendor":"qualcomm"},{"product":"wcn3988_firmware","vendor":"qualcomm"},{"product":"wcn6740_firmware","vendor":"qualcomm"},{"product":"wcn6755_firmware","vendor":"qualcomm"},{"product":"wcn7860_firmware","vendor":"qualcomm"},{"product":"wcn7861_firmware","vendor":"qualcomm"},{"product":"wcn7880_firmware","vendor":"qualcomm"},{"product":"wcn7881_firmware","vendor":"qualcomm"},{"product":"wsa8810_firmware","vendor":"qualcomm"},{"product":"wsa8815_firmware","vendor":"qualcomm"},{"product":"wsa8830_firmware","vendor":"qualcomm"},{"product":"wsa8832_firmware","vendor":"qualcomm"},{"product":"wsa8835_firmware","vendor":"qualcomm"},{"product":"wsa8840_firmware","vendor":"qualcomm"},{"product":"wsa8845_firmware","vendor":"qualcomm"},{"product":"wsa8845h_firmware","vendor":"qualcomm"}],"cvss":{"score":8.2,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"cwes":[{"id":"CWE-310","name":null}],"description":"Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Cryptographic Issues in BT Controller","id":"CVE-2024-38408","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"qualcomm:315_5g_iot_modem_firmware","products":["qualcomm:315_5g_iot_modem_firmware","qualcomm:aqt1000_firmware","qualcomm:ar8035_firmware","qualcomm:csrb31024_firmware","qualcomm:fastconnect_6200_firmware","qualcomm:fastconnect_6700_firmware","qualcomm:fastconnect_6800_firmware","qualcomm:fastconnect_6900_firmware","qualcomm:fastconnect_7800_firmware","qualcomm:flight_rb5_5g_platform_firmware","qualcomm:immersive_home_214_platform_firmware","qualcomm:immersive_home_216_platform_firmware","qualcomm:immersive_home_316_platform_firmware","qualcomm:immersive_home_318_platform_firmware","qualcomm:ipq5010_firmware","qualcomm:ipq5028_firmware","qualcomm:qam8255p_firmware","qualcomm:qam8295p_firmware","qualcomm:qam8620p_firmware","qualcomm:qam8650p_firmware","qualcomm:qam8775p_firmware","qualcomm:qamsrv1h_firmware","qualcomm:qamsrv1m_firmware","qualcomm:qca1062_firmware","qualcomm:qca1064_firmware","qualcomm:qca2062_firmware","qualcomm:qca2064_firmware","qualcomm:qca2065_firmware","qualcomm:qca2066_firmware","qualcomm:qca6174a_firmware","qualcomm:qca6175a_firmware","qualcomm:qca6391_firmware","qualcomm:qca6420_firmware","qualcomm:qca6421_firmware","qualcomm:qca6426_firmware","qualcomm:qca6430_firmware","qualcomm:qca6431_firmware","qualcomm:qca6436_firmware","qualcomm:qca6554a_firmware","qualcomm:qca6564au_firmware","qualcomm:qca6574_firmware","qualcomm:qca6574a_firmware","qualcomm:qca6574au_firmware","qualcomm:qca6584au_firmware","qualcomm:qca6595_firmware","qualcomm:qca6595au_firmware","qualcomm:qca6678aq_firmware","qualcomm:qca6688aq_firmware","qualcomm:qca6696_firmware","qualcomm:qca6698aq_firmware","qualcomm:qca6797aq_firmware","qualcomm:qca8081_firmware","qualcomm:qca8337_firmware","qualcomm:qcc2073_firmware","qualcomm:qcc2076_firmware","qualcomm:qcc710_firmware","qualcomm:qcm4490_firmware","qualcomm:qcm5430_firmware","qualcomm:qcm6125_firmware","qualcomm:qcm6490_firmware","qualcomm:qcm8550_firmware","qualcomm:qcn6023_firmware","qualcomm:qcn6024_firmware","qualcomm:qcn6100_firmware","qualcomm:qcn6102_firmware","qualcomm:qcn6112_firmware","qualcomm:qcn6122_firmware","qualcomm:qcn6132_firmware","qualcomm:qcn6224_firmware","qualcomm:qcn6274_firmware","qualcomm:qcn7605_firmware","qualcomm:qcn7606_firmware","qualcomm:qcn9000_firmware","qualcomm:qcn9001_firmware","qualcomm:qcn9002_firmware","qualcomm:qcn9003_firmware","qualcomm:qcn9011_firmware","qualcomm:qcn9012_firmware","qualcomm:qcn9022_firmware","qualcomm:qcn9024_firmware","qualcomm:qcn9070_firmware","qualcomm:qcn9072_firmware","qualcomm:qcn9074_firmware","qualcomm:qcn9100_firmware","qualcomm:qcn9274_firmware","qualcomm:qcs4490_firmware","qualcomm:qcs5430_firmware","qualcomm:qcs6125_firmware","qualcomm:qcs6490_firmware","qualcomm:qcs7230_firmware","qualcomm:qcs8250_firmware","qualcomm:qcs8550_firmware","qualcomm:qcs9100_firmware","qualcomm:qep8111_firmware","qualcomm:qfw7114_firmware","qualcomm:qfw7124_firmware","qualcomm:qrb5165m_firmware","qualcomm:qrb5165n_firmware","qualcomm:qsm8250_firmware","qualcomm:qsm8350_firmware","qualcomm:robotics_rb5_platform_firmware","qualcomm:sa4150p_firmware","qualcomm:sa4155p_firmware","qualcomm:sa6145p_firmware","qualcomm:sa6150p_firmware","qualcomm:sa6155_firmware","qualcomm:sa6155p_firmware","qualcomm:sa7255p_firmware","qualcomm:sa7775p_firmware","qualcomm:sa8145p_firmware","qualcomm:sa8150p_firmware","qualcomm:sa8155_firmware","qualcomm:sa8155p_firmware","qualcomm:sa8195p_firmware","qualcomm:sa8255p_firmware","qualcomm:sa8295p_firmware","qualcomm:sa8620p_firmware","qualcomm:sa8650p_firmware","qualcomm:sa8770p_firmware","qualcomm:sa8775p_firmware","qualcomm:sa9000p_firmware","qualcomm:sc8180x\\+sdx55_firmware","qualcomm:sc8380xp_firmware","qualcomm:sd855_firmware","qualcomm:sd865_5g_firmware","qualcomm:sd888_firmware","qualcomm:sd_8_gen1_5g_firmware","qualcomm:sdx55_firmware","qualcomm:sdx61_firmware","qualcomm:sg8275p_firmware","qualcomm:sm6250_firmware","qualcomm:sm6250p_firmware","qualcomm:sm6370_firmware","qualcomm:sm7250p_firmware","qualcomm:sm7315_firmware","qualcomm:sm7325p_firmware","qualcomm:sm8550p_firmware","qualcomm:sm8635_firmware","qualcomm:sm8750_firmware","qualcomm:sm8750p_firmware","qualcomm:snapdragon_480\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_480_5g_mobile_platform_firmware","qualcomm:snapdragon_4_gen_1_mobile_platform_firmware","qualcomm:snapdragon_690_5g_mobile_platform_firmware","qualcomm:snapdragon_695_5g_mobile_platform_firmware","qualcomm:snapdragon_720g_mobile_platform_firmware","qualcomm:snapdragon_750g_5g_mobile_platform_firmware","qualcomm:snapdragon_765_5g_mobile_platform_firmware","qualcomm:snapdragon_765g_5g_mobile_platform_firmware","qualcomm:snapdragon_768g_5g_mobile_platform_firmware","qualcomm:snapdragon_778g\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_778g_5g_mobile_platform_firmware","qualcomm:snapdragon_780g_5g_mobile_platform_firmware","qualcomm:snapdragon_782g_mobile_platform_firmware","qualcomm:snapdragon_7c\\+_gen_3_compute_firmware","qualcomm:snapdragon_7c_compute_platform_firmware","qualcomm:snapdragon_855\\+\\/860_mobile_platform_firmware","qualcomm:snapdragon_855_mobile_platform_firmware","qualcomm:snapdragon_865\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_865_5g_mobile_platform_firmware","qualcomm:snapdragon_870_5g_mobile_platform_firmware","qualcomm:snapdragon_888\\+_5g_mobile_platform_firmware","qualcomm:snapdragon_888_5g_mobile_platform_firmware","qualcomm:snapdragon_8\\+_gen_1_mobile_platform_firmware","qualcomm:snapdragon_8\\+_gen_2_mobile_platform_firmware","qualcomm:snapdragon_8_gen_1_mobile_platform_firmware","qualcomm:snapdragon_8_gen_2_mobile_platform_firmware","qualcomm:snapdragon_8_gen_3_mobile_platform_firmware","qualcomm:snapdragon_ar2_gen_1_platform_firmware","qualcomm:snapdragon_auto_4g_modem_firmware","qualcomm:snapdragon_auto_5g_modem-rf_firmware","qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware","qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware","qualcomm:snapdragon_x35_5g_modem-rf_system_firmware","qualcomm:snapdragon_x55_5g_modem-rf_system_firmware","qualcomm:snapdragon_x62_5g_modem-rf_system_firmware","qualcomm:snapdragon_x65_5g_modem-rf_system_firmware","qualcomm:snapdragon_x72_5g_modem-rf_system_firmware","qualcomm:snapdragon_x75_5g_modem-rf_system_firmware","qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware","qualcomm:snapdragon_xr2_5g_platform_firmware","qualcomm:srv1h_firmware","qualcomm:srv1l_firmware","qualcomm:srv1m_firmware","qualcomm:ssg2115p_firmware","qualcomm:ssg2125p_firmware","qualcomm:sw5100_firmware","qualcomm:sw5100p_firmware","qualcomm:sxr1230p_firmware","qualcomm:sxr2130_firmware","qualcomm:sxr2230p_firmware","qualcomm:sxr2250p_firmware","qualcomm:video_collaboration_vc1_platform_firmware","qualcomm:video_collaboration_vc3_platform_firmware","qualcomm:video_collaboration_vc5_platform_firmware","qualcomm:wcd9340_firmware","qualcomm:wcd9341_firmware","qualcomm:wcd9360_firmware","qualcomm:wcd9370_firmware","qualcomm:wcd9375_firmware","qualcomm:wcd9380_firmware","qualcomm:wcd9385_firmware","qualcomm:wcd9390_firmware","qualcomm:wcd9395_firmware","qualcomm:wcn3950_firmware","qualcomm:wcn3980_firmware","qualcomm:wcn3988_firmware","qualcomm:wcn6740_firmware","qualcomm:wcn6755_firmware","qualcomm:wcn7860_firmware","qualcomm:wcn7861_firmware","qualcomm:wcn7880_firmware","qualcomm:wcn7881_firmware","qualcomm:wsa8810_firmware","qualcomm:wsa8815_firmware","qualcomm:wsa8830_firmware","qualcomm:wsa8832_firmware","qualcomm:wsa8835_firmware","qualcomm:wsa8840_firmware","qualcomm:wsa8845_firmware","qualcomm:wsa8845h_firmware"],"type":"weak_cryptography","year":"2024"},"n_packages":0,"n_references":1,"next":{"headline":"Buffer Copy Without Checking Size of Input in WLAN Windows Host","id":"CVE-2024-38409"},"packages":[],"prev":{"headline":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera","id":"CVE-2024-38407"},"products":["Snapdragon"],"published":"2024-11-04","related":[{"cvss_score":8.4,"headline":"Qualcomm Multiple Chipsets Integer Overflow","id":"CVE-2023-33107","kev_date_added":"2023-12-05","published":"2023-12-05"},{"cvss_score":7.8,"headline":"Qualcomm Multiple Chipsets Use-After-Free","id":"CVE-2023-33063","kev_date_added":"2023-12-05","published":"2023-12-05"},{"cvss_score":9.8,"headline":"Improper Validation of Array Index in Multi-Mode Call Processor","id":"CVE-2025-27034","kev_date_added":null,"published":"2025-09-24"},{"cvss_score":9.8,"headline":"Use of Out-of-range Pointer Offset in Multi-mode Call Processor","id":"CVE-2023-22388","kev_date_added":null,"published":"2023-11-07"},{"cvss_score":9.3,"headline":"Improper Input Validation in Services","id":"CVE-2023-28578","kev_date_added":null,"published":"2024-03-04"},{"cvss_score":9.3,"headline":"Buffer copy without checking size of Input in Core","id":"CVE-2023-33072","kev_date_added":null,"published":"2024-02-06"},{"cvss_score":9.3,"headline":"Buffer Copy without Checking Size of Input in HLOS","id":"CVE-2023-33030","kev_date_added":null,"published":"2024-01-02"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2024-11-04","vendors":["Qualcomm, Inc."]},"summary":"A cryptographic flaw in the Bluetooth controller allows bypassing encryption when receiving unexpected LMP commands, affecting Snapdragon devices.","url":"https://insights.sbomify.com/CVE-2024-38408/"}