Skip to content
OpenAdvisories
High · 8.4 CVE-2023-33023 EUVD-2023-37212GHSA-v65q-97vc-7hf3

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Published Apr 1, 2024 · Updated Aug 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while processing finish_sign command to pass a rsp buffer.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, APQ8017, APQ8037, APQ8064AU, AQT1000, AR8031, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, Home Hub 100 Platform, MDM9640, MDM9650, MSM8996AU, PM8937, QAM8255P, … —

Advisories 1

References