Skip to content
OpenAdvisories
High · 7.8 CVE-2023-33018 EUVD-2023-37207GHSA-rw95-68xg-rf7m

Integer Overflow to Buffer Overflow in User Identity Module

Published Dec 5, 2023 · Updated Oct 10, 2024 · Assigned by qualcomm

Description

Memory corruption while using the UIM diag command to get the operators name.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, 9205 LTE Modem, 9206 LTE Modem, 9207 LTE Modem, APQ8017, APQ8037, AQT1000, AR6003, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, MDM8207, MDM8215, MDM8215M, MDM8615M, MDM9205S, MDM9215, … —

Advisories 1

References