Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-33025 EUVD-2023-37214GHSA-gxgx-xpgc-8hmf

Buffer Copy without Checking Size of Input in Data Modem

Published Jan 2, 2024 · Updated Apr 17, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, FastConnect 6700, FastConnect 6900, QCA8081, QCA8337, QCM4490, QCN6024, QCN9024, QCS4490, SM4450, Snapdragon 680 4G Mobile Platform, Snapdragon 685 4G Mobile Platform (SM6225-AD), Snapdragon X65 5G Modem-RF System, Snapdragon X70 Modem-RF System, WCD9370, WCD9375, WCD9380, WCN3950, WCN3988,… —

Advisories 1

References