Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-33302 EUVD-2022-36345GHSA-3rwq-2648-vg59

Improper validation of array index in User Identity Module

Published Apr 4, 2023 · Updated Aug 3, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, 9205 LTE Modem, 9206 LTE Modem, 9207 LTE Modem, APQ8017, APQ8037, AQT1000, AR6003, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, MDM8207, MDM8215, MDM8215M, MDM8615M, MDM9215, MDM9230, M… —

Advisories 1

References