PT-2023-18305 · Qualcomm · Snapdragon+15

Published 2023-07-04 · Updated 2024-04-12 · CVE-2023-21641

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description An app with non-privileged access can change global system brightness and cause undesired system behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2023-21641

Affected Products

Snapdragon

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Qca6574Au Firmware

Qca6696 Firmware

Sa6145P Firmware

Sa6150P Firmware

Sa6155P Firmware

Sa8145P Firmware

Sa8150P Firmware

Sa8155P Firmware

Sa8195P Firmware

Snapdragon 8 Gen 1 Firmware

Wcd9380 Firmware

Wsa8830 Firmware

Wsa8835 Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-21641 · Security Note
• https://qualcomm.com/company/product-security/bulletins/july-2023-bulletin · Vendor Advisory
• https://t.me/cibsecurity/65919 · Telegram Post