NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-24855

CVSS 3.1: 9.8 critical
EPSS: <1%p44
Published: Oct 3, 2023 · Oct 3, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-24855 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Vendors: qualcomm

Products: ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware, qca6391 firmware, qca8081 firmware, qca8337 firmware, qcc710 firmware, qcm4490 firmware, qcm6490 firmware, qcm8550 firmware

Weakness: CWE-823, CWE-787

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

4 stories

Chipmaker Qualcomm warns of three actively exploited zero

Security AffairsOct 4, 13:17 UTC · Oct 4, 2023Exploit / PoCExploitedCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+45 · 1 read

60

Arm and Qualcomm Hit by Multiple Zero

Infosecurity MagazineOct 4, 10:30 UTC · Oct 4, 2023Exploit / PoCExploitedCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+62 · 1 read

60

Qualcomm Releases Patch for 3 new Zero

The Hacker NewsOct 4, 06:29 UTC · Oct 4, 2023VulnerabilityExploitedCVE-2023-33106 CVE-2023-33107 CVE-2022-22071+51

60

Qualcomm patches 3 actively exploited zero-days

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2023Exploit / PoCExploitedCVE-2023-33106 CVE-2023-33107 CVE-2023-33063+53 · 1 read

60