9.1
Critical
CVE-2023-43551 Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase…
Description
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| 315_5g_iot_modem_firmware | Versions not published | |
| 9205_lte_modem_firmware | Versions not published | |
| 9206_lte_modem_firmware | Versions not published | |
| 9207_lte_modem_firmware | Versions not published | |
| apq8017_firmware | Versions not published | |
| apq8037_firmware | Versions not published | |
| aqt1000_firmware | Versions not published | |
| ar6003_firmware | Versions not published |
Show the 93 other branches Hide the 93 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| ar8035_firmware | Versions not published | |
| c-v2x_9150_firmware | Versions not published | |
| csra6620_firmware | Versions not published | |
| csra6640_firmware | Versions not published | |
| csrb31024_firmware | Versions not published | |
| fastconnect_6200_firmware | Versions not published | |
| fastconnect_6700_firmware | Versions not published | |
| fastconnect_6800_firmware | Versions not published | |
| fastconnect_6900_firmware | Versions not published | |
| fastconnect_7800_firmware | Versions not published | |
| mdm8207_firmware | Versions not published | |
| mdm9205s_firmware | Versions not published | |
| mdm9230_firmware | Versions not published | |
| mdm9250_firmware | Versions not published | |
| mdm9330_firmware | Versions not published | |
| mdm9615_firmware | Versions not published | |
| mdm9628_firmware | Versions not published | |
| mdm9630_firmware | Versions not published | |
| mdm9640_firmware | Versions not published | |
| msm8108_firmware | Versions not published | |
| msm8209_firmware | Versions not published | |
| msm8608_firmware | Versions not published | |
| msm8909w_firmware | Versions not published | |
| msm8996au_firmware | Versions not published | |
| qca4004_firmware | Versions not published | |
| qca6174_firmware | Versions not published | |
| qca6174a_firmware | Versions not published | |
| qca6310_firmware | Versions not published | |
| qca6320_firmware | Versions not published | |
| qca6335_firmware | Versions not published | |
| qca6391_firmware | Versions not published | |
| qca6420_firmware | Versions not published | |
| qca6421_firmware | Versions not published | |
| qca6426_firmware | Versions not published | |
| qca6430_firmware | Versions not published | |
| qca6431_firmware | Versions not published | |
| qca6436_firmware | Versions not published | |
| qca6564a_firmware | Versions not published | |
| qca6564au_firmware | Versions not published | |
| qca6574_firmware | Versions not published | |
| qca6574a_firmware | Versions not published | |
| qca6574au_firmware | Versions not published | |
| qca6584_firmware | Versions not published | |
| qca6584au_firmware | Versions not published | |
| qca6595au_firmware | Versions not published | |
| qca6696_firmware | Versions not published | |
| qca6698aq_firmware | Versions not published | |
| qca8081_firmware | Versions not published | |
| qca8337_firmware | Versions not published | |
| qca9367_firmware | Versions not published | |
| qca9377_firmware | Versions not published | |
| qcc710_firmware | Versions not published | |
| qcm2290_firmware | Versions not published | |
| qcm4290_firmware | Versions not published | |
| qcm4325_firmware | Versions not published | |
| qcm4490_firmware | Versions not published | |
| qcm5430_firmware | Versions not published | |
| qcm6125_firmware | Versions not published | |
| qcm6490_firmware | Versions not published | |
| qcm8550_firmware | Versions not published | |
| qcn6024_firmware | Versions not published | |
| qcn6224_firmware | Versions not published | |
| qcn6274_firmware | Versions not published | |
| qcn9024_firmware | Versions not published | |
| qcs2290_firmware | Versions not published | |
| qcs410_firmware | Versions not published | |
| qcs4290_firmware | Versions not published | |
| qcs4490_firmware | Versions not published | |
| qcs5430_firmware | Versions not published | |
| qcs610_firmware | Versions not published | |
| qcs6125_firmware | Versions not published | |
| qcs6490_firmware | Versions not published | |
| qcs8550_firmware | Versions not published | |
| qfw7114_firmware | Versions not published | |
| qfw7124_firmware | Versions not published | |
| qts110_firmware | Versions not published | |
| qualcomm_205_mobile_platform_firmware | Versions not published | |
| qualcomm_215_mobile_platform_firmware | Versions not published | |
| qualcomm_video_collaboration_vc1_platform_firmware | Versions not published | |
| qualcomm_video_collaboration_vc3_platform_firmware | Versions not published | |
| robotics_rb3_platform_firmware | Versions not published | |
| sd_455_firmware | Versions not published | |
| sd_675_firmware | Versions not published | |
| sd626_firmware | Versions not published | |
| sd660_firmware | Versions not published | |
| sd670_firmware | Versions not published | |
| sd675_firmware | Versions not published | |
| sd730_firmware | Versions not published | |
| sd820_firmware | Versions not published | |
| sd835_firmware | Versions not published | |
| sd855_firmware | Versions not published | |
| sd865_5g_firmware | Versions not published | |
| sd888_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High