CVE-2023-33025

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-33025
Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm4490:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs4490:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:sm4450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm4450:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_680_4g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_685_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_685_4g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x65_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x70_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
History

08 Jan 2024, 18:40

Type Values Removed Values Added
CPE cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm4450:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x65_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs4490:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm4450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x70_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm4490:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_680_4g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_685_4g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_685_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*
CWE CWE-120
References () https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin - () https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin - Vendor Advisory
First Time Qualcomm qcs4490
Qualcomm wsa8830
Qualcomm sm4450 Firmware
Qualcomm fastconnect 6900 Firmware
Qualcomm wcn3988
Qualcomm qcn6024
Qualcomm qcs4490 Firmware
Qualcomm qca8337 Firmware
Qualcomm wcd9370 Firmware
Qualcomm qca8081 Firmware
Qualcomm
Qualcomm wsa8810
Qualcomm fastconnect 6900
Qualcomm wcd9370
Qualcomm snapdragon 685 4g Mobile Platform Firmware
Qualcomm qca8337
Qualcomm wcd9375
Qualcomm snapdragon X70 Modem-rf System
Qualcomm snapdragon X65 5g Modem-rf System Firmware
Qualcomm snapdragon 680 4g Mobile Platform
Qualcomm ar8035 Firmware
Qualcomm wsa8835 Firmware
Qualcomm qcm4490
Qualcomm wsa8835
Qualcomm wcd9380
Qualcomm wcn3950
Qualcomm wsa8810 Firmware
Qualcomm qcn9024
Qualcomm fastconnect 6700
Qualcomm wsa8832 Firmware
Qualcomm wsa8815 Firmware
Qualcomm wcn3950 Firmware
Qualcomm qcn9024 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wcd9375 Firmware
Qualcomm snapdragon 680 4g Mobile Platform Firmware
Qualcomm wsa8830 Firmware
Qualcomm wcd9380 Firmware
Qualcomm qca8081
Qualcomm qcm4490 Firmware
Qualcomm ar8035
Qualcomm snapdragon X70 Modem-rf System Firmware
Qualcomm wsa8832
Qualcomm wsa8815
Qualcomm snapdragon X65 5g Modem-rf System
Qualcomm sm4450
Qualcomm snapdragon 685 4g Mobile Platform
Qualcomm qcn6024 Firmware
Qualcomm fastconnect 6700 Firmware

02 Jan 2024, 13:47

Type Values Removed Values Added
Summary
  • (es) Corrupción de la memoria en el módem de datos cuando un cuerpo SDP no estándar, durante una llamada VOLTE.

02 Jan 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-02 06:15

Updated : 2024-04-12 16:15

NVD link : CVE-2023-33025

Mitre link : CVE-2023-33025

CVE.ORG link : CVE-2023-33025

JSON object : View

Products Affected

qualcomm

  • sm4450
  • qcs4490_firmware
  • qcn9024_firmware
  • qca8337
  • snapdragon_680_4g_mobile_platform
  • wcn3950_firmware
  • wsa8830_firmware
  • qcm4490
  • qcn6024_firmware
  • wsa8830
  • wsa8835_firmware
  • snapdragon_685_4g_mobile_platform
  • snapdragon_x65_5g_modem-rf_system
  • qcn6024
  • qcn9024
  • wsa8815
  • wsa8815_firmware
  • wsa8810
  • wsa8832
  • sm4450_firmware
  • snapdragon_685_4g_mobile_platform_firmware
  • qca8081
  • wcd9370
  • fastconnect_6900_firmware
  • wcd9375
  • wcn3950
  • wcd9380
  • qca8081_firmware
  • snapdragon_x65_5g_modem-rf_system_firmware
  • qcs4490
  • wcd9380_firmware
  • wcd9375_firmware
  • wsa8835
  • ar8035_firmware
  • fastconnect_6900
  • qca8337_firmware
  • wcd9370_firmware
  • fastconnect_6700_firmware
  • qcm4490_firmware
  • snapdragon_x70_modem-rf_system
  • ar8035
  • wcn3988
  • snapdragon_x70_modem-rf_system_firmware
  • wsa8832_firmware
  • wcn3988_firmware
  • wsa8810_firmware
  • fastconnect_6700
  • snapdragon_680_4g_mobile_platform_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')