HIGH · 8.2

CVE-2024-53020

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

Vulnerability Description

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
QualcommApq8017 Firmware-
QualcommApq8017-
QualcommApq8064Au Firmware-
QualcommApq8064Au-
QualcommAqt1000 Firmware-
QualcommAqt1000-
QualcommFastconnect 6200 Firmware-
QualcommFastconnect 6200-
QualcommFastconnect 6700 Firmware-
QualcommFastconnect 6700-
QualcommQcm6125 Firmware-
QualcommQcm6125-
QualcommQcm6490 Firmware-
QualcommQcm6490-
QualcommQcm8550 Firmware-
QualcommQcm8550-
QualcommQcn9011 Firmware-
QualcommQcn9011-
QualcommQcn9012 Firmware-
QualcommQcn9012-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-53020?

CVE-2024-53020 is a vulnerability with a CVSS score of 8.2 (HIGH). Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

How severe is CVE-2024-53020?

CVE-2024-53020 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-53020?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8017 Firmware, Qualcomm Apq8017, Qualcomm Apq8064Au Firmware, Qualcomm Apq8064Au, Qualcomm Aqt1000 Firmware.