Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-33077 EUVD-2023-37266GHSA-4683-q5fv-6j3x

Buffer Copy Without Checking Size of Input in HLOS

Published Feb 6, 2024 · Updated Aug 22, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in HLOS while converting from authorization token to HIDL vector.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8035, C-V2X 9150, FastConnect 6200, FastConnect 6800, FastConnect 6900, FastConnect 7800, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6310, QCA6320, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6574AU, QCA6584AU, QCA6696, QCA6698AQ, QCA8081, QCA8337, QCC710, QCN6224… —

Advisories 1

References