CVE-2024-33052: Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow') in FMHost
Summary
CVE-2024-33052: ... Affects platform/vendor/qcom-opensource/fm-commonsys versions >= SoCVersion:0, < SoCVersion:2024-09-05. Fixed in SoCVersion:2024-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The FMHost package is a component of the fm-commonsys platform in the Android ecosystem. It is responsible for managing FM radio functionality on Qualcomm Snapdragon SoC devices. FMHost interacts with the radio hardware and provides the necessary APIs for controlling FM radio features. However, a vulnerability has been discovered in FMHost that allows for a buffer copy without checking the size of the input, leading to a classic buffer overflow.
Vulnerability Detail
The vulnerability in FMHost arises from a lack of input size validation when copying data into a buffer. This can be exploited by an attacker to overwrite adjacent memory locations, potentially leading to arbitrary code execution or a system crash. The vulnerability has a critical severity level and can be triggered by sending specially crafted input to the affected component. Several functions in the 'radio_helium_hal.c' file are affected, including 'hci_ev_program_service', 'hci_cc_default_data_read_rsp', and 'hci_cmd_complete_event'. The vulnerability has been fixed in the latest version of FMHost.
How To Fix
Minimum fixed version
SoCVersion:2024-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
FMHost in the fm-commonsys package for Qualcomm Snapdragon SoC devices is vulnerable to a buffer overflow issue. This vulnerability can be exploited to execute arbitrary code or crash the system. It is recommended to update to the latest version of fm-commonsys to mitigate this vulnerability.
See every vulnerability recorded for platform/vendor/qcom-opensource/fm-commonsys →
FAQ
The vulnerability allows an attacker to execute arbitrary code or crash the system, potentially leading to a complete compromise of the affected device.
Yes, this vulnerability can be exploited remotely if the affected device is connected to a network.
No, only versions prior to the fixed version (SoCVersion: 2024-09-05) are affected by this vulnerability.
No evidence of active exploitation has been reported at the time of this disclosure.
The vulnerability has a critical severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/fm-commonsys.
