CVE-2024-33031

Improper Input Validation in RIL

Published Nov 4, 2024 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
Memory corruption while processing the update SIM PB records request.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-30776 Memory corruption while processing the update SIM PB records request.
History
Type Values Removed Values Added
First Time appeared Qualcomm ar8035
Qualcomm fastconnect 7800
Qualcomm qca8081
Qualcomm qca8337
Qualcomm qcc710
Qualcomm qcn6224
Qualcomm qcn6274
Qualcomm qfw7114
Qualcomm qfw7124
Qualcomm sdm429w
Qualcomm snapdragon 429 Mobile Platform
Qualcomm snapdragon X72 5g Modem-rf System
Qualcomm snapdragon X75 5g Modem-rf System
Qualcomm wcd9340
Qualcomm wcn3620
Qualcomm wcn3660b
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm ar8035
Qualcomm fastconnect 7800
Qualcomm qca8081
Qualcomm qca8337
Qualcomm qcc710
Qualcomm qcn6224
Qualcomm qcn6274
Qualcomm qfw7114
Qualcomm qfw7124
Qualcomm sdm429w
Qualcomm snapdragon 429 Mobile Platform
Qualcomm snapdragon X72 5g Modem-rf System
Qualcomm snapdragon X75 5g Modem-rf System
Qualcomm wcd9340
Qualcomm wcn3620
Qualcomm wcn3660b
Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm ar8035 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qca8081 Firmware
Qualcomm qca8337 Firmware
Qualcomm qcc710 Firmware
Qualcomm qcn6224 Firmware
Qualcomm qcn6274 Firmware
Qualcomm qfw7114 Firmware
Qualcomm qfw7124 Firmware
Qualcomm sdm429w Firmware
Qualcomm snapdragon 429 Mobile Platform Firmware
Qualcomm snapdragon X72 5g Modem-rf System Firmware
Qualcomm snapdragon X75 5g Modem-rf System Firmware
Qualcomm wcd9340 Firmware
Qualcomm wcn3620 Firmware
Qualcomm wcn3660b Firmware
CPEs cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm ar8035 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qca8081 Firmware
Qualcomm qca8337 Firmware
Qualcomm qcc710 Firmware
Qualcomm qcn6224 Firmware
Qualcomm qcn6274 Firmware
Qualcomm qfw7114 Firmware
Qualcomm qfw7124 Firmware
Qualcomm sdm429w Firmware
Qualcomm snapdragon 429 Mobile Platform Firmware
Qualcomm snapdragon X72 5g Modem-rf System Firmware
Qualcomm snapdragon X75 5g Modem-rf System Firmware
Qualcomm wcd9340 Firmware
Qualcomm wcn3620 Firmware
Qualcomm wcn3660b Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Memory corruption while processing the update SIM PB records request.
Title Improper Input Validation in RIL
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}