CVE-2023-33025

CRITICAL

9.8

Description

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published1/2/2024

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:ar8035qualcomm:ar8035_firmwarequalcomm:fastconnect_6700qualcomm:fastconnect_6700_firmwarequalcomm:fastconnect_6900qualcomm:fastconnect_6900_firmwarequalcomm:qca8081qualcomm:qca8081_firmwarequalcomm:qca8337qualcomm:qca8337_firmwarequalcomm:qcm4490qualcomm:qcm4490_firmwarequalcomm:qcn6024qualcomm:qcn6024_firmwarequalcomm:qcn9024qualcomm:qcn9024_firmwarequalcomm:qcs4490qualcomm:qcs4490_firmwarequalcomm:sm4450qualcomm:sm4450_firmwarequalcomm:snapdragon_680_4g_mobile_platformqualcomm:snapdragon_680_4g_mobile_platform_firmwarequalcomm:snapdragon_685_4g_mobile_platformqualcomm:snapdragon_685_4g_mobile_platform_firmwarequalcomm:snapdragon_x65_5g_modem-rf_systemqualcomm:snapdragon_x65_5g_modem-rf_system_firmwarequalcomm:snapdragon_x70_modem-rf_systemqualcomm:snapdragon_x70_modem-rf_system_firmwarequalcomm:wcd9370qualcomm:wcd9370_firmwarequalcomm:wcd9375qualcomm:wcd9375_firmwarequalcomm:wcd9380qualcomm:wcd9380_firmwarequalcomm:wcn3950qualcomm:wcn3950_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wsa8810qualcomm:wsa8810_firmwarequalcomm:wsa8815qualcomm:wsa8815_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8832qualcomm:wsa8832_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Weaknesses (CWE)

CWE-120CWE-120

References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.