315 5G Firmware
CVE-2023-21629
MEDIUM
Double Free (CWE-415)
2023-07-04
product-security@qualcomm.com
Buffer Overflow
315 5G Firmware
Apq8017 Firmware
Apq8037 Firmware
Aqt1000 Firmware
Ar8035 Firmware
C V2x 9150 Firmware
Csra6620 Firmware
Csra6640 Firmware
Csrb31024 Firmware
Fastconnect 6200 Firmware
Fastconnect 6700 Firmware
Fastconnect 6800 Firmware
Fastconnect 6900 Firmware
Fastconnect 7800 Firmware
Mdm9250 Firmware
Mdm9650 Firmware
Msm8108 Firmware
Msm8209 Firmware
Msm8608 Firmware
Msm8909W Firmware
Qca6174a Firmware
Qca6310 Firmware
Qca6320 Firmware
Qca6335 Firmware
Qca6391 Firmware
Qca6420 Firmware
Qca6421 Firmware
Qca6426 Firmware
Qca6430 Firmware
Qca6431 Firmware
Qca6436 Firmware
Qca6564a Firmware
Qca6564au Firmware
Qca6574a Firmware
Qca6574au Firmware
Qca6595au Firmware
Qca6696 Firmware
Qca6698aq Firmware
Qca8081 Firmware
Qca8337 Firmware
Qca9377 Firmware
Qcm2290 Firmware
Qcm4290 Firmware
Qcm4325 Firmware
Qcm4490 Firmware
Qcm6125 Firmware
Qcm6490 Firmware
Qcn6024 Firmware
Qcn9024 Firmware
Qcs2290 Firmware
Qcs410 Firmware
Qcs4290 Firmware
Qcs4490 Firmware
Qcs610 Firmware
Qcs6125 Firmware
Qcs6490 Firmware
Qcs8550 Firmware
205 Firmware
215 Firmware
Video Collaboration Vc1 Platform Firmware
Video Collaboration Vc3 Platform Firmware
Robotics Rb3 Firmware
Sa6145p Firmware
Sa6150p Firmware
Sa6155 Firmware
Sa6155p Firmware
Sa8145p Firmware
Sa8150p Firmware
Sa8155 Firmware
Sa8155p Firmware
Sa8195p Firmware
Sc8180X Sdx55 Firmware
Sd 455 Firmware
Sd 675 Firmware
Sd460 Firmware
Sd626 Firmware
Sd660 Firmware
Sd662 Firmware
Sd670 Firmware
Sd675 Firmware
Sd730 Firmware
Sd835 Firmware
Sd855 Firmware
Sd865 5g Firmware
Sd888 Firmware
Sdx55 Firmware
Sdx57m Firmware
Sg4150p Firmware
Sm6250 Firmware
Sm6250p Firmware
Sm7250p Firmware
Sm7315 Firmware
Sm7325p Firmware
Smart Audio 200 Firmware
Smart Audio 400 Firmware
Smart Display 200 Firmware
Snapdragon 208 Firmware
Snapdragon 210 Firmware
Snapdragon 212 Firmware
Snapdragon 4 Gen 1 Firmware
Snapdragon 4 Gen 2 Firmware
Snapdragon 425 Firmware
Snapdragon 427 Firmware
Snapdragon 429 Firmware
Snapdragon 430 Firmware
Snapdragon 435 Firmware
Snapdragon 439 Firmware
Snapdragon 450 Firmware
Snapdragon 460 Firmware
Snapdragon 480 5G Firmware
Snapdragon 625 Firmware
Snapdragon 626 Firmware
Snapdragon 630 Firmware
Snapdragon 632 Firmware
Snapdragon 636 Firmware
Snapdragon 660 Firmware
Snapdragon 662 Firmware
Snapdragon 665 Firmware
Snapdragon 670 Firmware
Snapdragon 675 Firmware
Snapdragon 678 Firmware
Snapdragon 680 4G Firmware
Snapdragon 685 4G Firmware
Snapdragon 690 5G Firmware
Snapdragon 695 5G Firmware
Snapdragon 710 Firmware
Snapdragon 712 Firmware
Snapdragon 720G Firmware
Snapdragon 730 Firmware
Snapdragon 730G Firmware
Snapdragon 732G Firmware
Snapdragon 750G 5G Firmware
Snapdragon 765 5G Firmware
Snapdragon 765G 5G Firmware
Snapdragon 768G 5G Firmware
Snapdragon 778G 5G Firmware
Snapdragon 780G 5G Firmware
Snapdragon 782G Firmware
Snapdragon 7c Firmware
Snapdragon 7C Gen 2 Firmware
Snapdragon 7C Gen 3 Firmware
Snapdragon 8 Gen 1 Firmware
Snapdragon 835 Firmware
Snapdragon 845 Firmware
Snapdragon 850 Firmware
Snapdragon 855 Firmware
Snapdragon 855 860 Firmware
Snapdragon 865 5G Firmware
Snapdragon 870 5G Firmware
Snapdragon 888 5G Firmware
Sc8180x Ad Firmware
Sc8180xp Ad Firmware
Sc8180x Aaab Firmware
Sc8180xp Acaf Firmware
Sc8180x Acaf Firmware
Sc8180xp Aaab Firmware
Snapdragon Auto 5G Firmware
Snapdragon W5 Gen 1 Firmware
Snapdragon Wear 2100 Firmware
Snapdragon Wear 2500 Firmware
Snapdragon Wear 3100 Firmware
Snapdragon X12 Firmware
Snapdragon X20 Firmware
Snapdragon X24 Firmware
Snapdragon X50 5G Firmware
Snapdragon X55 5G Firmware
Snapdragon X65 5G Firmware
Snapdragon X70 Firmware
Snapdragon Xr1 Firmware
Snapdragon Xr2 5g Firmware
Snapdragon Auto 4g Firmware
Sw5100 Firmware
Sw5100p Firmware
Sxr1120 Firmware
Sxr2130 Firmware
Vision Intelligence 100 Firmware
Vision Intelligence 200 Firmware
Vision Intelligence 300 Firmware
Vision Intelligence 400 Firmware
Wcd9326 Firmware
Wcd9335 Firmware
Wcd9340 Firmware
Wcd9341 Firmware
Wcd9360 Firmware
Wcd9370 Firmware
Wcd9371 Firmware
Wcd9375 Firmware
Wcd9380 Firmware
Wcd9385 Firmware
Wcn3610 Firmware
Wcn3615 Firmware
Wcn3620 Firmware
Wcn3660 Firmware
Wcn3660b Firmware
Wcn3680 Firmware
Wcn3680b Firmware
Wcn3910 Firmware
Wcn3950 Firmware
Wcn3980 Firmware
Wcn3988 Firmware
Wcn3990 Firmware
Wcn6740 Firmware
Wsa8810 Firmware
Wsa8815 Firmware
Wsa8830 Firmware
Wsa8832 Firmware
Wsa8835 Firmware
6.8
CVSS 3.1 · NVD
Share
Severity by source
NVD
PRIMARY
6.8
MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
1
CVE Published
Jul 04, 2023 - 05:15 nvd
MEDIUM 6.8
DescriptionNVD
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
AnalysisAI
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-415. Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Affected products include: Qualcomm 315 5G Firmware, Qualcomm Apq8017 Firmware, Qualcomm Apq8037 Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8035 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in 315 5G Firmware
View all
CVE-2023-21631
CRITICAL
9.8
Jul 04
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received
CVE-2023-33015
HIGH
7.5
Sep 05
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. Rated high severity (CVSS 7.5),
Same weakness CWE-415 – Double Free
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).