CVE-2023-33025: Buffer Copy without Checking Size of Input in Data Modem
Published Jan 2, 2024
·Updated
Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
Affected Software
49 affected components
Google Android
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Qcm4490 Firmware
Qualcomm Qcm4490
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcs4490 Firmware
Qualcomm Qcs4490
All of the following
Qualcomm Sm4450 Firmware
Qualcomm Sm4450
All of the following
Qualcomm Snapdragon 680 4g Mobile Platform Firmware
Qualcomm Snapdragon 680 4g Mobile Platform
All of the following
Qualcomm Snapdragon 685 4g Mobile Platform Firmware
Qualcomm Snapdragon 685 4g Mobile Platform
All of the following
Qualcomm Snapdragon X65 5g Modem-rf System Firmware
Qualcomm Snapdragon X65 5g Modem-rf System
All of the following
Qualcomm Snapdragon X70 Modem-rf System Firmware
Qualcomm Snapdragon X70 Modem-rf System
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Jan 2, 2024
CVE Published
via MITRE·05:38 AM
Data Sourced
via MITRE·05:38 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-33025?
CVE-2023-33025 is classified as a high-severity vulnerability due to potential memory corruption issues during VOLTE calls.
2
How do I fix CVE-2023-33025?
To mitigate CVE-2023-33025, users should update their affected devices to the latest security patches provided by manufacturers.
3
Which devices are affected by CVE-2023-33025?
CVE-2023-33025 affects certain versions of Android and various Qualcomm firmware products.
4
What is the impact of CVE-2023-33025?
The impact of CVE-2023-33025 includes potential arbitrary code execution and stability issues during VOIP calls.
5
Is CVE-2023-33025 being actively exploited?
As of now, there are no reported active exploits for CVE-2023-33025, but users are advised to patch promptly.