CVE-2023-24855

Use of Out-of-range Pointer Offset in Modem

State: Published
Severity: 9.8 Critical
Published: Oct 3, 2023
Updated: Feb 27, 2025
Reserved: Jan 31, 2023

Description

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-823 Use of Out-of-range Pointer Offset

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6200Affected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected QCA6391Affected QCA8081Affected QCA8337Affected QCC710Affected QCM4490Affected QCM6490Affected QCM8550Affected QCN6024Affected QCN6224Affected QCN6274Affected QCN9024Affected QCS4490Affected QCS6490Affected QCS8550Affected QFW7114Affected QFW7124Affected Qualcomm Video Collaboration VC3 PlatformAffected SDX57MAffected SG8275PAffected SM7325PAffected and 38 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6200Affected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCA6391Affected
QCA8081Affected
QCA8337Affected
QCC710Affected
QCM4490Affected
QCM6490Affected
QCM8550Affected
QCN6024Affected
QCN6224Affected
QCN6274Affected
QCN9024Affected
QCS4490Affected
QCS6490Affected
QCS8550Affected
QFW7114Affected
QFW7124Affected
Qualcomm Video Collaboration VC3 PlatformAffected
SDX57MAffected
SG8275PAffected
SM7325PAffected
and 38 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.