PT-2023-18307 · Qualcomm · Snapdragon+19

Meysam Firouzi + 1 · Publicado 2023-08-08 · Atualizado 2024-04-12 · CVE-2023-21643

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves memory corruption due to an untrusted pointer dereference in automotive systems during a system call. This can potentially lead to significant security risks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Untrusted Pointer Dereference

Memory Corruption

Enumeração de Fraquezas

CWE-822

CWE-787

Identificadores relacionados

CVE-2023-21643

Produtos afetados

Snapdragon

Apq8064Au Firmware

Apq8096Au Firmware

Msm8996Au Firmware

Qam8295P Firmware

Qca6564Au Firmware

Qca6574Au Firmware

Qca6584Au Firmware

Qca6595Au Firmware

Qca6696 Firmware

Sa6145P Firmware

Sa6150P Firmware

Sa6155P Firmware

Sa8145P Firmware

Sa8150P Firmware

Sa8155P Firmware

Sa8195P Firmware

Sa8295P Firmware

Sa8540P Firmware

Sa9000P Firmware

Referências · 3

• https://qualcomm.com/company/product-security/bulletins/august-2023-bulletin · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21643 · Nota de Segurança
• https://twitter.com/cracbot/status/1689154645921595392 · Publicação no Twitter