CVE-2024-53027

CVE-2024-53027 is a vulnerability that may cause a transient denial-of-service (DoS) condition while processing the country information element (IE). It is associated with CWE-120 (Buffer Copy without Checking Size of Input) and affects components in Qualcomm products.

The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating it can be exploited remotely by an unauthenticated attacker with low attack complexity and no user interaction. Successful exploitation results in high-impact disruption to availability through a transient DoS, with no impact on confidentiality or integrity.

Qualcomm has published details and mitigation guidance in its March 2025 Security Bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html.