9205 Lte Modem Firmware
CVE-2023-33032
CRITICAL
Severity by source
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
AnalysisAI
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Affected products include: Qualcomm 9205 Lte Modem Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8031 Firmware, Qualcomm C-V2X 9150 Firmware, Qualcomm Csr8811 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.
More in 9205 Lte Modem Firmware
View allMemory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no
Memory corruption while loading an ELF segment in TEE Kernel. Rated high severity (CVSS 8.8), this vulnerability is low
Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability i
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. Rated
Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.
Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Rated high severity (CV
Memory corruption while processing key blob passed by the user. Rated high severity (CVSS 7.8), this vulnerability is lo
Memory corruption while performing finish HMAC operation when context is freed by keymaster. Rated high severity (CVSS 7
Memory corruption while using the UIM diag command to get the operators name. Rated high severity (CVSS 7.8), this vulne
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. Rated high severity (CVSS 7.8), this v
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Integer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today