Skip to content
OpenAdvisories
High · 7.8 CVE-2023-28551 EUVD-2023-32221GHSA-68vj-vr49-ppvw

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Published Dec 5, 2023 · Updated Aug 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, 9205 LTE Modem, 9206 LTE Modem, 9207 LTE Modem, APQ8017, APQ8037, AQT1000, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, FSM10055, MDM8207, MDM9205S, MDM9250, MDM9628, MDM9640, MSM8108, … —

Advisories 1

References