CVE-2024-23385

Q: What is the severity of CVE-2024-23385?

CVE-2024-23385 has a CVSS score of 7.5 (HIGH). This vulnerability allows attackers to cause a denial-of-service (DoS) condition in mobile devices by sending specially crafted MAC RAR messages with invalid PDU lengths, triggering a modem reset. It affects mobile devices using Qualcomm modems, potentially impacting cellular connectivity and device functionality.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in mobile devices by sending specially crafted MAC RAR messages with invalid PDU lengths, triggering a modem reset. It affects mobile devices using Qualcomm modems, potentially impacting cellular connectivity and device functionality.

💻 Affected Systems

Products:

Qualcomm modem chipsets

Versions: Specific versions not publicly detailed in advisory

Operating Systems: Android and other mobile OS using Qualcomm modems

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with vulnerable Qualcomm modem firmware; exact chipset models not specified in public advisory.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Persistent DoS attacks could render mobile devices temporarily unusable for cellular services, disrupting voice calls, messaging, and data connectivity until manual reboot.

🟠

Likely Case

Temporary service disruption causing dropped calls, failed data connections, or brief loss of cellular connectivity until modem automatically recovers.

🟢

If Mitigated

Minimal impact with proper network filtering and updated firmware preventing malicious packets from reaching vulnerable devices.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: LOW

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Requires ability to send crafted cellular network packets to target device; likely requires proximity or network access.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm November 2024 security bulletin for specific patched versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates. 2. Apply Qualcomm modem firmware updates from device OEM. 3. Reboot device after update installation.

🔧 Temporary Workarounds

Network filtering

all

Implement network-level filtering to block malicious MAC RAR packets with invalid PDU lengths

🧯 If You Can't Patch

Implement network monitoring for abnormal MAC RAR traffic patterns
Restrict physical and network access to cellular interfaces where possible

🔍 How to Verify

Check if Vulnerable:

Check device modem firmware version against Qualcomm security bulletin; contact device manufacturer for vulnerability status

Check Version:

Device-specific commands vary by manufacturer; typically in Settings > About Phone > Baseband Version

Verify Fix Applied:

Verify modem firmware has been updated to version containing November 2024 Qualcomm security patches

📡 Detection & Monitoring

Log Indicators:

Unexpected modem resets
MAC RAR processing errors in modem logs
Abnormal cellular disconnection events

Network Indicators:

Spike in MAC RAR messages with unusual PDU lengths
Abnormal cellular signaling patterns

SIEM Query:

Not applicable - requires specialized cellular network monitoring

📊 Metadata

CVE ID: CVE-2024-23385

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-617

Published: November 4, 2024

Last Updated: November 7, 2024

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

205 Mobile Platform Firmware by Qualcomm

Apq8017 Firmware by Qualcomm

Apq8037 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Fsm10055 Firmware by Qualcomm

Fsm10056 Firmware by Qualcomm

Msm8108 Firmware by Qualcomm

Msm8209 Firmware by Qualcomm

Msm8608 Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qep8111 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Sdm429w Firmware by Qualcomm

Sdx55 Firmware by Qualcomm

Sdx57m Firmware by Qualcomm

Sdx61 Firmware by Qualcomm

Sdx71m Firmware by Qualcomm

Sg8275p Firmware by Qualcomm

Sm6370 Firmware by Qualcomm

Sm8550p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Smart Audio 200 Platform Firmware by Qualcomm

Snapdragon 208 Processor Firmware by Qualcomm

Snapdragon 210 Processor Firmware by Qualcomm

Snapdragon 212 Mobile Platform Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 425 Mobile Platform Firmware by Qualcomm

Snapdragon 429 Mobile Platform Firmware by Qualcomm

Snapdragon 430 Mobile Platform Firmware by Qualcomm

Snapdragon 439 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon Auto 5g Modem Rf Gen 2 Firmware by Qualcomm

Snapdragon Wear 4100\+ Platform Firmware by Qualcomm

Snapdragon X35 5g Modem Rf System Firmware by Qualcomm

Snapdragon X62 5g Modem Rf System Firmware by Qualcomm

Snapdragon X65 5g Modem Rf System Firmware by Qualcomm

Snapdragon X70 Modem Rf System Firmware by Qualcomm

Snapdragon X72 5g Modem Rf System Firmware by Qualcomm

Snapdragon X75 5g Modem Rf System Firmware by Qualcomm

Wcd9326 Firmware by Qualcomm

Wcd9340 Firmware by Qualcomm

Wcd9360 Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm

Wcd9390 Firmware by Qualcomm

Wcd9395 Firmware by Qualcomm