PT-2024-25076 · Qualcomm · Snapdragon+16

Published 2024-11-04 · Updated 2024-11-07 · CVE-2024-33031

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description There is a memory corruption issue when handling the request to update SIM PB records. This issue occurs while processing the update SIM PB records request, leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2024-33031

Affected Products

Snapdragon

Ar8035 Firmware

Fastconnect 7800 Firmware

Qca8081 Firmware

Qca8337 Firmware

Qcc710 Firmware

Qcn6224 Firmware

Qcn6274 Firmware

Qfw7114 Firmware

Qfw7124 Firmware

Sdm429W Firmware

Snapdragon 429 Mobile Platform Firmware

Snapdragon X72 5G Modem-Rf System Firmware

Snapdragon X75 5G Modem-Rf System Firmware

Wcd9340 Firmware

Wcn3620 Firmware

Wcn3660B Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-33031 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html · Vendor Advisory
• https://t.me/cvedetector/9716 · Telegram Post
• https://twitter.com/CVEnew/status/1853381321416118549 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1853451359590170877 · Twitter Post
• https://t.me/cvenotify/100981 · Telegram Post
• https://t.me/cvenotify/100472 · Telegram Post