Skip to content
OpenAdvisories
High · 8.4 CVE-2023-33092 EUVD-2023-37281GHSA-mp7j-cmhv-jxm4

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Published Dec 5, 2023 · Updated May 29, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, QCA6310, QCA6320, QCA6391, QCA6420, QCA6430, QCM4325, QCM4490, QCM5430, QCM6490, QCM8550, QCS4490, QCS5430, QCS6490, QCS7230, QCS8250, QCS8550, Qualcomm 215 Mobile Platform, Qualcomm Video Collaborati… —

Advisories 1

References