CVE-2023-33025

CRITICAL

9.8

Descripcion

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado1/2/2024

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

qualcomm:ar8035qualcomm:ar8035_firmwarequalcomm:fastconnect_6700qualcomm:fastconnect_6700_firmwarequalcomm:fastconnect_6900qualcomm:fastconnect_6900_firmwarequalcomm:qca8081qualcomm:qca8081_firmwarequalcomm:qca8337qualcomm:qca8337_firmwarequalcomm:qcm4490qualcomm:qcm4490_firmwarequalcomm:qcn6024qualcomm:qcn6024_firmwarequalcomm:qcn9024qualcomm:qcn9024_firmwarequalcomm:qcs4490qualcomm:qcs4490_firmwarequalcomm:sm4450qualcomm:sm4450_firmwarequalcomm:snapdragon_680_4g_mobile_platformqualcomm:snapdragon_680_4g_mobile_platform_firmwarequalcomm:snapdragon_685_4g_mobile_platformqualcomm:snapdragon_685_4g_mobile_platform_firmwarequalcomm:snapdragon_x65_5g_modem-rf_systemqualcomm:snapdragon_x65_5g_modem-rf_system_firmwarequalcomm:snapdragon_x70_modem-rf_systemqualcomm:snapdragon_x70_modem-rf_system_firmwarequalcomm:wcd9370qualcomm:wcd9370_firmwarequalcomm:wcd9375qualcomm:wcd9375_firmwarequalcomm:wcd9380qualcomm:wcd9380_firmwarequalcomm:wcn3950qualcomm:wcn3950_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wsa8810qualcomm:wsa8810_firmwarequalcomm:wsa8815qualcomm:wsa8815_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8832qualcomm:wsa8832_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Debilidades (CWE)

CWE-120CWE-120

Referencias

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.