PT-2023-18308 · Ril · Ril

Published 2023-09-04 · Updated 2024-04-12 · CVE-2023-21644

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RIL (affected versions not specified)

Description The issue is related to memory corruption in RIL due to an integer overflow when triggering the qcril uim request apdu request. This can potentially lead to security risks. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-680

CWE-190

Related Identifiers

CVE-2023-21644

Affected Products

Ril

References · 6

• https://qualcomm.com/company/product-security/bulletins/september-2023-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21644 · Security Note
• https://twitter.com/CVEnew/status/1698948780555399355 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1699072798847815823 · Twitter Post
• https://t.me/cibsecurity/69838 · Telegram Post
• https://twitter.com/R3dShield/status/1701440493022773416 · Twitter Post