Lucene search

QualcommCVE-2023-21639

HistoryJul 04, 2023 - 5:15 a.m.

CVE-2023-21639

2023-07-0405:15:10

CWE-787

CWE-120

qualcomm

web.nvd.nist.gov

cve-2023-21639

memory corruption

audio

sva_model_serializer

hidl client

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Affected configurations

Nvd

Node

qualcommaqt1000Match-

AND

qualcommaqt1000_firmwareMatch-

Node

qualcommfastconnect_6200_firmwareMatch-

AND

qualcommfastconnect_6200Match-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommsa4150p_firmwareMatch-

AND

qualcommsa4150pMatch-

Node

qualcommsa4155p_firmwareMatch-

AND

qualcommsa4155pMatch-

Node

qualcommsa6155p_firmwareMatch-

AND

qualcommsa6155pMatch-

Node

qualcommsa8155p_firmwareMatch-

AND

qualcommsa8155pMatch-

Node

qualcommsa8195p_firmwareMatch-

AND

qualcommsa8195pMatch-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsnapdragon_855_firmwareMatch-

AND

qualcommsnapdragon_855Match-

Node

qualcommsnapdragon_855\+\/860_firmwareMatch-

AND

qualcommsnapdragon_855\+\/860Match-

Node

qualcommsnapdragon_w5\+_gen_1_firmwareMatch-

AND

qualcommsnapdragon_w5\+_gen_1Match-

Node

qualcommsw5100_firmwareMatch-

AND

qualcommsw5100Match-

Node

qualcommsw5100p_firmwareMatch-

AND

qualcommsw5100pMatch-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommaqt1000_firmware-cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
qualcommfastconnect_6200_firmware-cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*
qualcommfastconnect_6200-cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*
qualcommqca6420_firmware-cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
qualcommqca6420-cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*
qualcommqca6430_firmware-cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
qualcommqca6430-cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*
qualcommsa4150p_firmware-cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*
qualcommsa4150p-cpe:2.3:h:qualcomm:sa4150p:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	aqt1000	-	cpe:2.3:h:qualcomm:aqt1000:-:::::::*
qualcomm	aqt1000_firmware	-	cpe:2.3:o:qualcomm:aqt1000_firmware:-:::::::*
qualcomm	fastconnect_6200_firmware	-	cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:::::::*
qualcomm	fastconnect_6200	-	cpe:2.3:h:qualcomm:fastconnect_6200:-:::::::*
qualcomm	qca6420_firmware	-	cpe:2.3:o:qualcomm:qca6420_firmware:-:::::::*
qualcomm	qca6420	-	cpe:2.3:h:qualcomm:qca6420:-:::::::*
qualcomm	qca6430_firmware	-	cpe:2.3:o:qualcomm:qca6430_firmware:-:::::::*
qualcomm	qca6430	-	cpe:2.3:h:qualcomm:qca6430:-:::::::*
qualcomm	sa4150p_firmware	-	cpe:2.3:o:qualcomm:sa4150p_firmware:-:::::::*
qualcomm	sa4150p	-	cpe:2.3:h:qualcomm:sa4150p:-:::::::*

Rows per page:

1-10 of 441

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Mobile",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "QCA6420"
      },
      {
        "status": "affected",
        "version": "QCA6430"
      },
      {
        "status": "affected",
        "version": "SA4150P"
      },
      {
        "status": "affected",
        "version": "SA4155P"
      },
      {
        "status": "affected",
        "version": "SA6155P"
      },
      {
        "status": "affected",
        "version": "SA8155P"
      },
      {
        "status": "affected",
        "version": "SA8195P"
      },
      {
        "status": "affected",
        "version": "SD855"
      },
      {
        "status": "affected",
        "version": "Snapdragon 855 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon W5+ Gen 1 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "WCD9341"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-21639