Memory corruption in RIL due to Integer Overflow while... · CVE-2023-21644 · GitHub Advisory Database · GitHub

Memory corruption in RIL due to Integer Overflow while...

High severity Unreviewed Published Sep 5, 2023 to the GitHub Advisory Database • Updated Apr 12, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.

References

Published by the National Vulnerability Database

Sep 5, 2023

Published to the GitHub Advisory Database Sep 5, 2023

Last updated Apr 12, 2024

Weaknesses

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Learn more on MITRE.

CWE-680

Integer Overflow to Buffer Overflow

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow. Learn more on MITRE.