Information Disclosure Vulnerability in VoLTE/VoWiFi IMS Call by Qualcomm

CVE-2024-53026

What is CVE-2024-53026?

An information disclosure vulnerability exists when an invalid RTCP packet is processed during a Voice over LTE (VoLTE) or Voice over Wi-Fi (VoWiFi) IMS call. This can potentially expose sensitive information during the communication process, enabling unauthorized access to certain data streams. Users may be at risk if they use affected Qualcomm IMS products without applying the necessary security patches.

References