Improper validation of array index in User Identity Module
Published Apr 4, 2023
7.8
HIGHCVSS 3.1
EPSS 0.12%
Description
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
Affected products
-
Affected
- 315 5G IoT Modem
- 9205 LTE Modem
- 9206 LTE Modem
- 9207 LTE Modem
- APQ8017
- APQ8037
- AQT1000
- AR6003
- AR8035
- C-V2X 9150
- CSRA6620
- CSRA6640
- CSRB31024
- FastConnect 6200
- FastConnect 6700
- FastConnect 6800
- FastConnect 6900
- FastConnect 7800
- MDM8207
- MDM8215
- MDM8215M
- MDM8615M
- MDM9215
- MDM9230
- MDM9250
- MDM9310
- MDM9330
- MDM9615
- MDM9615M
- MDM9628
- MDM9630
- MDM9640
- MDM9650
- MSM8108
- MSM8209
- MSM8608
- MSM8909W
- MSM8996AU
- QCA4004
- QCA6174
- QCA6174A
- QCA6310
- QCA6320
- QCA6335
- QCA6391
- QCA6420
- QCA6421
- QCA6426
- QCA6430
- QCA6431
- QCA6436
- QCA6564A
- QCA6564AU
- QCA6574
- QCA6574A
- QCA6574AU
- QCA6584
- QCA6584AU
- QCA6595AU
- QCA6696
- QCA6698AQ
- QCA8081
- QCA8337
- QCA9367
- QCA9377
- QCM2290
- QCM4290
- QCM4325
- QCM6125
- QCM6490
- QCN6024
- QCN9024
- QCS2290
- QCS410
- QCS4290
- QCS610
- QCS6125
- QCS6490
- QTS110
- Qualcomm 205 Mobile Platform
- Qualcomm 215 Mobile Platform
- Qualcomm Robotics RB3 Platform
- SC8180X+SDX55
- SD 455
- SD 675
- SD 8cx Gen2
- SD460
- SD626
- SD660
- SD662
- SD670
- SD675
- SD730
- SD778G
- SD7c
- SD820
- SD835
- SD855
- SD865 5G
- SD888
- SDM429W
- SDX55
- SDX57M
- SG4150P
- SM6250
- SM6250P
- SM7250P
- SM7315
- SM7325P
- SW5100
- SW5100P
- SXR1120
- SXR2130
- Smart Audio 200 Platform
- Smart Audio 400 Platform
- Smart Display 200 Platform (APQ5053-AA)
- Snapdragon 1100 Wearable Platform
- Snapdragon 1200 Wearable Platform
- Snapdragon 208 Processor
- Snapdragon 210 Processor
- Snapdragon 212 Mobile Platform
- Snapdragon 4 Gen 1 Mobile Platform
- Snapdragon 425 Mobile Platform
- Snapdragon 427 Mobile Platform
- Snapdragon 429 Mobile Platform
- Snapdragon 430 Mobile Platform
- Snapdragon 435 Mobile Platform
- Snapdragon 439 Mobile Platform
- Snapdragon 450 Mobile Platform
- Snapdragon 460 Mobile Platform
- Snapdragon 480 5G Mobile Platform
- Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
- Snapdragon 625 Mobile Platform
- Snapdragon 626 Mobile Platform
- Snapdragon 630 Mobile Platform
- Snapdragon 632 Mobile Platform
- Snapdragon 636 Mobile Platform
- Snapdragon 660 Mobile Platform
- Snapdragon 662 Mobile Platform
- Snapdragon 665 Mobile Platform
- Snapdragon 670 Mobile Platform
- Snapdragon 675 Mobile Platform
- Snapdragon 678 Mobile Platform (SM6150-AC)
- Snapdragon 680 4G Mobile Platform
- Snapdragon 685 4G Mobile Platform (SM6225-AD)
- Snapdragon 690 5G Mobile Platform
- Snapdragon 695 5G Mobile Platform
- Snapdragon 710 Mobile Platform
- Snapdragon 712 Mobile Platform
- Snapdragon 720G Mobile Platform
- Snapdragon 730 Mobile Platform (SM7150-AA)
- Snapdragon 730G Mobile Platform (SM7150-AB)
- Snapdragon 732G Mobile Platform (SM7150-AC)
- Snapdragon 750G 5G Mobile Platform
- Snapdragon 765 5G Mobile Platform (SM7250-AA)
- Snapdragon 765G 5G Mobile Platform (SM7250-AB)
- Snapdragon 768G 5G Mobile Platform (SM7250-AC)
- Snapdragon 778G 5G Mobile Platform
- Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
- Snapdragon 780G 5G Mobile Platform
- Snapdragon 782G Mobile Platform (SM7325-AF)
- Snapdragon 8 Gen 1 Mobile Platform
- Snapdragon 820 Automotive Platform
- Snapdragon 835 Mobile Platform
- Snapdragon 845 Mobile Platform
- Snapdragon 850 Mobile Compute Platform
- Snapdragon 855 Mobile Platform
- Snapdragon 855+/860 Mobile Platform (SM8150-AC)
- Snapdragon 865 5G Mobile Platform
- Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
- Snapdragon 870 5G Mobile Platform (SM8250-AC)
- Snapdragon 888 5G Mobile Platform
- Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
- Snapdragon Auto 4G Modem
- Snapdragon Auto 5G Modem-RF
- Snapdragon W5+ Gen 1 Wearable Platform
- Snapdragon Wear 1300 Platform
- Snapdragon Wear 2100 Platform
- Snapdragon Wear 2500 Platform
- Snapdragon Wear 3100 Platform
- Snapdragon Wear 4100+ Platform
- Snapdragon X12 LTE Modem
- Snapdragon X20 LTE Modem
- Snapdragon X24 LTE Modem
- Snapdragon X5 LTE Modem
- Snapdragon X50 5G Modem-RF System
- Snapdragon X55 5G Modem-RF System
- Snapdragon X65 5G Modem-RF System
- Snapdragon X70 Modem-RF System
- Snapdragon XR1 Platform
- Snapdragon XR2 5G Platform
- Vision Intelligence 100 Platform (APQ8053-AA)
- Vision Intelligence 200 Platform (APQ8053-AC)
- Vision Intelligence 300 Platform
- Vision Intelligence 400 Platform
- WCD9306
- WCD9326
- WCD9330
- WCD9335
- WCD9340
- WCD9341
- WCD9360
- WCD9370
- WCD9371
- WCD9375
- WCD9380
- WCD9385
- WCN3610
- WCN3615
- WCN3620
- WCN3660
- WCN3660B
- WCN3680
- WCN3680B
- WCN3910
- WCN3950
- WCN3980
- WCN3988
- WCN3990
- WCN6740
- WSA8810
- WSA8815
- WSA8830
- WSA8835
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | unaffected | Affected
|
Configuration 1
- n/a
Running on/with
- n/a
Configuration 2
- n/a
Running on/with
- n/a
Configuration 3
- n/a
Running on/with
- n/a
Configuration 4
- n/a
Running on/with
- n/a
Configuration 5
- n/a
Configuration 6
- n/a
Configuration 7
- n/a
Configuration 8
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Running on/with
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Configuration 14
- n/a
Configuration 15
- n/a
Configuration 16
- n/a
Configuration 17
- n/a
Configuration 18
- n/a
Configuration 19
- n/a
Configuration 20
- n/a
Configuration 21
- n/a
Configuration 22
- n/a
Configuration 23
- n/a
Configuration 24
- n/a
Configuration 25
- n/a
Configuration 26
- n/a
Configuration 27
- n/a
Configuration 28
- n/a
Configuration 29
- n/a
Configuration 30
- n/a
Configuration 31
- n/a
Configuration 32
- n/a
Configuration 33
- n/a
Configuration 34
- n/a
Configuration 35
- n/a
Configuration 36
- n/a
Configuration 37
- n/a
Configuration 38
- n/a
Configuration 39
- n/a
Configuration 40
- n/a
Configuration 41
- n/a
Configuration 42
- n/a
Configuration 43
- n/a
Configuration 44
- n/a
Configuration 45
- n/a
Configuration 46
- n/a
Configuration 47
- n/a
Configuration 48
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
Configuration 52
- n/a
Configuration 53
- n/a
Configuration 54
- n/a
Configuration 55
- n/a
Configuration 56
- n/a
Configuration 57
- n/a
Configuration 58
- n/a
Configuration 59
- n/a
Configuration 60
- n/a
Configuration 61
- n/a
Configuration 62
- n/a
Configuration 63
- n/a
Configuration 64
- n/a
Configuration 65
- n/a
Configuration 66
- n/a
Configuration 67
- n/a
Configuration 68
- n/a
Configuration 69
- n/a
Configuration 70
- n/a
Configuration 71
- n/a
Configuration 72
- n/a
Configuration 73
- n/a
Configuration 74
- n/a
Configuration 75
- n/a
Configuration 76
- n/a
Configuration 77
- n/a
Configuration 78
- n/a
Configuration 79
- n/a
Configuration 80
- n/a
Configuration 81
- n/a
Configuration 82
- n/a
Configuration 83
- n/a
Configuration 84
Running on/with
- n/a
Configuration 85
- n/a
Running on/with
- n/a
Configuration 86
- n/a
Configuration 87
- n/a
Configuration 88
- n/a
Running on/with
- n/a
Configuration 89
- n/a
Configuration 90
- n/a
Configuration 91
- n/a
Configuration 92
- n/a
Configuration 93
- n/a
Configuration 94
- n/a
Configuration 95
- n/a
Configuration 96
- n/a
Configuration 97
- n/a
Configuration 98
- n/a
Configuration 99
- n/a
Configuration 100
- n/a
Configuration 101
- n/a
Configuration 102
- n/a
Configuration 103
- n/a
Configuration 104
- n/a
Configuration 105
- n/a
Configuration 106
- n/a
Configuration 107
- n/a
Configuration 108
- n/a
Configuration 109
- n/a
Configuration 110
- n/a
Configuration 111
- n/a
Configuration 112
- n/a
Running on/with
- n/a
Configuration 113
- n/a
Configuration 114
- n/a
Running on/with
- n/a
Configuration 115
Running on/with
- n/a
Configuration 116
Running on/with
- n/a
Configuration 117
Running on/with
- n/a
Configuration 118
- n/a
Configuration 119
- n/a
Configuration 120
- n/a
Configuration 121
- n/a
Configuration 122
- n/a
Configuration 123
- n/a
Configuration 124
- n/a
Configuration 125
- n/a
Configuration 126
- n/a
Configuration 127
- n/a
Configuration 128
- n/a
Configuration 129
- n/a
Configuration 130
- n/a
Configuration 131
- n/a
Configuration 132
Running on/with
- n/a
Configuration 133
Running on/with
- n/a
Configuration 134
Running on/with
- n/a
Configuration 135
- n/a
Configuration 136
- n/a
Configuration 137
- n/a
Configuration 138
- n/a
Configuration 139
- n/a
Configuration 140
- n/a
Configuration 141
- n/a
Configuration 142
- n/a
Configuration 143
- n/a
Configuration 144
- n/a
Configuration 145
- n/a
Configuration 146
- n/a
Configuration 147
- n/a
Configuration 148
- n/a
Configuration 149
- n/a
Configuration 150
- n/a
Configuration 151
- n/a
Configuration 152
- n/a
Configuration 153
- n/a
Configuration 154
- n/a
Configuration 155
- n/a
Configuration 156
- n/a
Configuration 157
- n/a
Configuration 158
- n/a
Configuration 159
- n/a
Configuration 160
Running on/with
- n/a
Configuration 161
Running on/with
- n/a
Configuration 162
- n/a
Configuration 163
- n/a
Configuration 164
- n/a
Configuration 165
- n/a
Configuration 166
- n/a
Configuration 167
- n/a
Configuration 168
- n/a
Configuration 169
- n/a
Configuration 170
- n/a
Configuration 171
Running on/with
- n/a
Configuration 172
Running on/with
- n/a
Configuration 173
Running on/with
- n/a
Configuration 174
Running on/with
- n/a
Configuration 175
Running on/with
- n/a
Configuration 176
Running on/with
- n/a
Configuration 177
Running on/with
- n/a
Configuration 178
Running on/with
- n/a
Configuration 179
Running on/with
- n/a
Configuration 180
Running on/with
- n/a
Configuration 181
- n/a
Running on/with
- n/a
Configuration 182
Running on/with
- n/a
Configuration 183
Running on/with
- n/a
Configuration 184
Running on/with
- n/a
Configuration 185
Running on/with
- n/a
Configuration 186
- n/a
Running on/with
- n/a
Configuration 187
Running on/with
- n/a
Configuration 188
Running on/with
- n/a
Configuration 189
- n/a
Configuration 190
- n/a
Configuration 191
- n/a
Configuration 192
- n/a
Configuration 193
- n/a
Running on/with
- n/a
Configuration 194
- n/a
Running on/with
- n/a
Configuration 195
- n/a
Configuration 196
- n/a
Configuration 197
- n/a
Configuration 198
- n/a
Configuration 199
- n/a
Configuration 200
- n/a
Configuration 201
- n/a
Configuration 202
- n/a
Configuration 203
- n/a
Configuration 204
- n/a
Configuration 205
- n/a
Configuration 206
- n/a
Configuration 207
- n/a
Configuration 208
- n/a
Configuration 209
- n/a
Configuration 210
- n/a
Configuration 211
- n/a
Configuration 212
- n/a
Configuration 213
- n/a
Configuration 214
- n/a
Configuration 215
- n/a
Configuration 216
- n/a
Configuration 217
- n/a
Configuration 218
- n/a
Configuration 219
- n/a
Configuration 220
- n/a
Configuration 221
- n/a
Configuration 222
- n/a
Configuration 223
- n/a
Configuration 224
- n/a
Configuration 225
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36345 Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36345 | Advisory | |
| https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin | Vendor Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data