CVE-2024-32633

MEDIUM

Published Apr 16, 2024 Modified Dec 10, 2025 CWE-570

Description

An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.

Is your site exposed to CVE-2024-32633?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.0

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

Weakness Type (CWE)

CWE-570 CWE-570

Affected Products

Vendor	Product	Versions
asrmicro	asr1803sc_firmware	< cp01.057.067
asrmicro	asr1803sc	All
asrmicro	asr1607_firmware	< cp01.057.067
asrmicro	asr1607	All
asrmicro	asr3603_firmware	< cp01.057.067
asrmicro	asr3603	All
asrmicro	asr3602_firmware	< cp01.057.067
asrmicro	asr3602	All
asrmicro	asr3605_firmware	< cp01.057.067
asrmicro	asr3605	All
asrmicro	asr3607_firmware	< cp01.057.067
asrmicro	asr3607	All
asrmicro	asr1609_firmware	< cp01.057.067
asrmicro	asr1609	All
asrmicro	asr1605_firmware	< cp01.057.067
asrmicro	asr1605	All
asrmicro	asr1602_firmware	< cp01.057.067
asrmicro	asr1602	All
asrmicro	asr1603_firmware	< cp01.057.067
asrmicro	asr1603	All
asrmicro	asr1606_firmware	< cp01.057.067
asrmicro	asr1606	All
asrmicro	asr1803_firmware	< cp01.057.067
asrmicro	asr1803	All
asrmicro	asr1806_firmware	< cp01.057.067
asrmicro	asr1806	All

References

Advisories & Patches

https://www.asrmicro.com/en/goods/psirt?cid=38 https://www.asrmicro.com/en/goods/psirt?cid=38

Frequently Asked Questions

What is CVE-2024-32633? +

An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way. It has a CVSS v3.1 base score of 4.0 (MEDIUM).

How severe is CVE-2024-32633? +

CVE-2024-32633 has a CVSS v3.1 score of 4.0 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-32633? +

CVE-2024-32633 affects products from asrmicro, specifically: asr1602, asr1602_firmware, asr1603, asr1603_firmware, asr1605, asr1605_firmware, asr1606, asr1606_firmware, asr1607, asr1607_firmware, asr1609, asr1609_firmware, asr1803, asr1803_firmware, asr1803sc, asr1803sc_firmware, asr1806, asr1806_firmware, asr3602, asr3602_firmware, asr3603, asr3603_firmware, asr3605, asr3605_firmware, asr3607, asr3607_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-32633? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-49480 7.4

Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before …

CVE-2025-49492 7.4

Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This …

CVE-2026-42799 7.4

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This …

CVE-2026-42800 7.4

NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated …

CVE-2024-32631 7.2

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

CVE-2024-32632 6.6

A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access