PT-2023-18307 · Qualcomm · Snapdragon+19

Meysam Firouzi + 1 · Published 2023-08-08 · Updated 2024-04-12 · CVE-2023-21643

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves memory corruption due to an untrusted pointer dereference in automotive systems during a system call. This can potentially lead to significant security risks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Untrusted Pointer Dereference

Memory Corruption

Weakness Enumeration

CWE-822

CWE-787

Related Identifiers

CVE-2023-21643

Affected Products

Snapdragon

Apq8064Au Firmware

Apq8096Au Firmware

Msm8996Au Firmware

Qam8295P Firmware

Qca6564Au Firmware

Qca6574Au Firmware

Qca6584Au Firmware

Qca6595Au Firmware

Qca6696 Firmware

Sa6145P Firmware

Sa6150P Firmware

Sa6155P Firmware

Sa8145P Firmware

Sa8150P Firmware

Sa8155P Firmware

Sa8195P Firmware

Sa8295P Firmware

Sa8540P Firmware

Sa9000P Firmware

References · 3

• https://qualcomm.com/company/product-security/bulletins/august-2023-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21643 · Security Note
• https://twitter.com/cracbot/status/1689154645921595392 · Twitter Post