CVE-2024-33031

Memory corruption while processing the update SIM PB records request.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

History

07 Nov 2024, 20:02

Type	Values Removed	Values Added
References	~~() https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html -~~	() https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html - Patch, Vendor Advisory
CPE		cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:::::::* cpe:2.3:h:qualcomm:qcn6224:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:::::::* cpe:2.3:o:qualcomm:qcn6274_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn3660b_firmware:-:::::::* cpe:2.3:h:qualcomm:qca8337:-:::::::* cpe:2.3:h:qualcomm:qcc710:-:::::::* cpe:2.3:o:qualcomm:wcn3620_firmware:-:::::::* cpe:2.3:o:qualcomm:sdm429w_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn6224_firmware:-:::::::* cpe:2.3:h:qualcomm:fastconnect_7800:-:::::::* cpe:2.3:h:qualcomm:sdm429w:-:::::::* cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::* cpe:2.3:h:qualcomm:wcn3660b:-:::::::* cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::* cpe:2.3:o:qualcomm:qcc710_firmware:-:::::::* cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:::::::* cpe:2.3:o:qualcomm:qfw7124_firmware:-:::::::* cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::* cpe:2.3:h:qualcomm:qcn6274:-:::::::* cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::* cpe:2.3:h:qualcomm:wcd9340:-:::::::* cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:::::::* cpe:2.3:h:qualcomm:qfw7114:-:::::::* cpe:2.3:h:qualcomm:ar8035:-:::::::* cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:::::::* cpe:2.3:o:qualcomm:wcd9340_firmware:-:::::::* cpe:2.3:h:qualcomm:qfw7124:-:::::::* cpe:2.3:h:qualcomm:qca8081:-:::::::* cpe:2.3:h:qualcomm:wcn3620:-:::::::* cpe:2.3:o:qualcomm:qfw7114_firmware:-:::::::*
CWE		NVD-CWE-noinfo
Summary		(es) Corrupción de memoria durante el procesamiento de la solicitud de actualización de registros PB de SIM.
First Time		Qualcomm snapdragon X72 5g Modem-rf System Qualcomm qca8337 Qualcomm qca8081 Firmware Qualcomm wcn3660b Qualcomm qcn6274 Firmware Qualcomm qca8337 Firmware Qualcomm Qualcomm ar8035 Qualcomm sdm429w Firmware Qualcomm snapdragon X72 5g Modem-rf System Firmware Qualcomm sdm429w Qualcomm qcn6224 Qualcomm wcn3620 Firmware Qualcomm ar8035 Firmware Qualcomm qfw7124 Qualcomm qcc710 Firmware Qualcomm snapdragon 429 Mobile Platform Firmware Qualcomm snapdragon 429 Mobile Platform Qualcomm wcn3620 Qualcomm snapdragon X75 5g Modem-rf System Qualcomm qcn6224 Firmware Qualcomm fastconnect 7800 Qualcomm snapdragon X75 5g Modem-rf System Firmware Qualcomm fastconnect 7800 Firmware Qualcomm qfw7114 Qualcomm wcd9340 Firmware Qualcomm qcc710 Qualcomm qcn6274 Qualcomm qfw7124 Firmware Qualcomm wcd9340 Qualcomm qca8081 Qualcomm wcn3660b Firmware Qualcomm qfw7114 Firmware

04 Nov 2024, 10:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-04 10:15

Updated : 2024-11-07 20:02

NVD link : CVE-2024-33031

Mitre link : CVE-2024-33031

CVE.ORG link : CVE-2024-33031

JSON object : View

Products Affected

qualcomm

qcn6224_firmware
qca8081
snapdragon_429_mobile_platform
wcn3620_firmware
wcn3660b_firmware
wcd9340_firmware
sdm429w_firmware
qcn6274_firmware
qcc710
wcd9340
snapdragon_x72_5g_modem-rf_system
snapdragon_x75_5g_modem-rf_system
sdm429w
qfw7114
wcn3620
ar8035
qfw7114_firmware
wcn3660b
ar8035_firmware
snapdragon_429_mobile_platform_firmware
fastconnect_7800_firmware
qfw7124_firmware
qfw7124
qcc710_firmware
qca8337
qcn6224
qca8081_firmware
snapdragon_x75_5g_modem-rf_system_firmware
qca8337_firmware
fastconnect_7800
qcn6274
snapdragon_x72_5g_modem-rf_system_firmware

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2024-33031", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2024-11-04T10:15:05.603", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html", "tags": ["Patch", "Vendor Advisory"], "source": "product-security@qualcomm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption while processing the update SIM PB records request."}, {"lang": "es", "value": "Corrupci\u00f3n de memoria durante el procesamiento de la solicitud de actualizaci\u00f3n de registros PB de SIM."}], "lastModified": "2024-11-07T20:02:31.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB37B5DB-2493-4082-B2BF-60385B7E027C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6BCD2FE2-11F2-4B2A-9BD7-EB26718139DA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D99CA230-0694-4898-A06E-9C522CCB86CE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62B00662-139A-4E36-98FA-D4F7D101D4AB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BA28CC6-C8BB-4F50-BFE3-A59F664A4F54"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "94D2BDF1-764C-48BA-8944-3275E8768078"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95A98B39-067F-4047-9ADB-7C53F18CBB7B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf_system:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C462F32-0E70-472A-A42D-CD0229A97E94"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "205BF723-DBED-4EAE-8B5C-0E01B01E1544"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_x72_5g_modem-rf_system:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9A36A7B8-CF35-4003-AC3E-C5D25288B1A1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "487D6D28-F007-4726-AB69-F68B1FF4CA3E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EB8FE3BF-8A02-4928-BA5F-BF2457D2C8CF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7E52771-4FB7-45DB-A349-4DD911F53752"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "72F6CE39-9299-4FC3-BC48-11F79034F2E4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D72C4CE0-AB59-4652-854F-94C9998F2712"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "98720774-11B8-4B4B-BC73-D4DA84E07F78"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7456782E-B6CE-42ED-A51E-39907120E28B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "637BF4DF-BB40-479F-B696-6AD9D4B35D64"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88376C1D-AC4D-4EB0-AF6A-274D020F5859"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E15BA4B4-C97F-45C0-A4AD-7E46387F19A6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F4362D2-30A3-4388-ABB6-293878AD7036"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BB6AE9A7-386A-473B-9BD5-DA37B1E696C5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A75D017-032F-4369-917C-567EE2A809F2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "107F0423-608C-404D-B58B-616A6494418F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FA8F9DA-1386-4961-B9B2-484E4347852A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "117289C8-7484-4EAE-8F35-A25768F00EED"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D1C53DC-D2F3-4C92-9725-9A85340AF026"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED0585FF-E390-46E8-8701-70964A4057BB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C88B9C86-2E8E-4DCE-A30C-02977CC00F00"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE473A5A-5CFC-4F08-A173-30717F8BD0D7"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "product-security@qualcomm.com"}

6.7 /10