CVE-2024-53019
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
- CVSS 3.1
- 8.2 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
- EPSS
- 0.24% probability · 16th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-126
- Affected
- qualcomm/fastconnect 6200 firmware · qualcomm/fastconnect 6700 firmware · qualcomm/fastconnect 6900 firmware · qualcomm/fastconnect 7800 firmware · qualcomm/qca6310 firmware · qualcomm/qca6320 firmware · qualcomm/qca6696 firmware · qualcomm/qcm4490 firmware · qualcomm/qcs4490 firmware · qualcomm/qmp1000 firmware · qualcomm/sa4150p firmware · qualcomm/sa4155p firmware · qualcomm/sa6155p firmware · qualcomm/sa8155p firmware · qualcomm/sa8195p firmware · qualcomm/sd 8 gen1 5g firmware · qualcomm/sd835 firmware · qualcomm/sdm429w firmware · qualcomm/sm4635 firmware · qualcomm/sm6650 firmware · +40 more
- Source
- product-security@qualcomm.com
EPSS 0.2% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.