Skip to content
OpenAdvisories
High · 8.4 CVE-2023-33113 EUVD-2023-37302GHSA-25rm-72cp-x5mm

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Published Jan 2, 2024 · Updated Jun 17, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, MDM9650, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA6174A, QCA6391, QCA6554A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCA6698AQ, QCA67… —

Advisories 1

References