Skip to content
OpenAdvisories
High · 7.8 CVE-2022-33248 EUVD-2022-36291GHSA-qjhr-gq7c-8mxc

Integer overflow to buffer overflow in User Identity Module

Published Feb 9, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon APQ8009, APQ8009W, APQ8017, APQ8037, AQT1000, AR8035, CSRA6620, CSRA6640, CSRB31024, MDM9150, MDM9250, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8909W, MSM8917, MSM8937, QCA6174A, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564A, QCA6… —

Advisories 1

References