CVE-2023-33025

Buffer Copy without Checking Size of Input in Data Modem

State: Published
Severity: 9.8 Critical
Published: Jan 2, 2024
Updated: Apr 17, 2025
Reserved: May 17, 2023

Description

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6700Affected FastConnect 6900Affected QCA8081Affected QCA8337Affected QCM4490Affected QCN6024Affected QCN9024Affected QCS4490Affected SM4450Affected Snapdragon 680 4G Mobile PlatformAffected Snapdragon 685 4G Mobile Platform (SM6225-AD)Affected Snapdragon X65 5G Modem-RF SystemAffected Snapdragon X70 Modem-RF SystemAffected WCD9370Affected WCD9375Affected WCD9380Affected WCN3950Affected WCN3988Affected WSA8810Affected WSA8815Affected WSA8830Affected WSA8832Affected WSA8835Affected

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6700Affected
FastConnect 6900Affected
QCA8081Affected
QCA8337Affected
QCM4490Affected
QCN6024Affected
QCN9024Affected
QCS4490Affected
SM4450Affected
Snapdragon 680 4G Mobile PlatformAffected
Snapdragon 685 4G Mobile Platform (SM6225-AD)Affected
Snapdragon X65 5G Modem-RF SystemAffected
Snapdragon X70 Modem-RF SystemAffected
WCD9370Affected
WCD9375Affected
WCD9380Affected
WCN3950Affected
WCN3988Affected
WSA8810Affected
WSA8815Affected
WSA8830Affected
WSA8832Affected
WSA8835Affected

References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.