Qualcomm Snapdragon Modem Transient Denial-of-Service Vulnerability in LTE Processing

A transient denial-of-service vulnerability has been identified in Qualcomm Snapdragon modems while processing random-access responses (RAR) over LTE networks. The issue arises when the network sends data with an invalid protocol data unit (PDU) length, leading to a temporary disruption in service.

Impact

Exploitation of this vulnerability causes a transient denial-of-service condition, disrupting normal processing of random-access responses on the LTE network.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm August 2025 Security Bulletin.