Cyber Posture

CVE-2024-53027

High

Published: 03 March 2025

Published
03 March 2025
Modified
11 August 2025
KEV Added
Patch
CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0034 56.8th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-53027 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Qualcomm Qca9367 Firmware. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 43.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Application or System Exploitation (T1499.004). What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Information input validation directly prevents buffer overflows like CWE-120 by enforcing size checks on country IE inputs before processing.

prevent

Flaw remediation requires applying Qualcomm patches to fix the specific unchecked buffer copy vulnerability causing transient DoS.

prevent

Denial-of-service protection implements resource limits and filtering to block or mitigate remote unauthenticated DoS from malformed country IEs.

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Buffer overflow in network packet processing (country IE) directly enables remote application/system crash for DoS via exploitation.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Transient DOS may occur while processing the country IE.

Deeper analysisAI

CVE-2024-53027 is a vulnerability that may cause a transient denial-of-service (DoS) condition while processing the country information element (IE). It is associated with CWE-120 (Buffer Copy without Checking Size of Input) and affects components in Qualcomm products.

The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating it can be exploited remotely by an unauthenticated attacker with low attack complexity and no user interaction. Successful exploitation results in high-impact disruption to availability through a transient DoS, with no impact on confidentiality or integrity.

Qualcomm has published details and mitigation guidance in its March 2025 Security Bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html.

Details

CWE(s)

Affected Products

qualcomm
qca9367 firmware
all versions
qualcomm
qca9377 firmware
all versions
qualcomm
qcc2073 firmware
all versions
qualcomm
qcc2076 firmware
all versions
qualcomm
qcc710 firmware
all versions
qualcomm
qcm2290 firmware
all versions
qualcomm
qcm4290 firmware
all versions
qualcomm
qcm5430 firmware
all versions
qualcomm
qcm6125 firmware
all versions
qualcomm
qcm6490 firmware
all versions
+202 more product configuration(s) — see NVD for full list

CVEs Like This One

CVE-2025-47389Same product: Qualcomm Ar8035
CVE-2026-21381Same product: Qualcomm Ar8035
CVE-2024-53014Same product: Qualcomm Ar8035
CVE-2026-21367Same product: Qualcomm Ar8035
CVE-2025-21424Same product: Qualcomm Ar8035
CVE-2025-47394Same product: Qualcomm Fastconnect 6200
CVE-2025-47388Same product: Qualcomm Fastconnect 6200
CVE-2024-45541Same product: Qualcomm Fastconnect 6200
CVE-2024-53024Same product: Qualcomm Ar8035
CVE-2024-21464Same product: Qualcomm Fastconnect 6700

References