Service interruption via attach-reject buffer over-read

Buffer over-read in Qualcomm Snapdragon modem firmware allows remote attackers to interrupt service with a crafted attach reject message. The Multi-Mode Call Processor decoder reads beyond the available message buffer when the attach reject information-element identifier is ESM_IEI. No authentication or user interaction is required, and the documented consequence is a transient service interruption rather than data access or code execution.