PT-2023-18318 · Qualcomm · Snapdragon+30

Published 2023-09-04 · Updated 2024-04-12 · CVE-2023-21655

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves memory corruption in the audio component when validating and mapping metadata. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2023-21655

Affected Products

Snapdragon

Qca6391 Firmware

Qca6574Au Firmware

Qca6696 Firmware

Qcc5100 Firmware

Sa6145P Firmware

Sa6150P Firmware

Sa6155P Firmware

Sa8145P Firmware

Sa8150P Firmware

Sa8155P Firmware

Sa8195P Firmware

Sd888 5G Firmware

Sd 8 Gen1 5G Firmware

Sdm429W Firmware

Sw5100P Firmware

Wcd9380 Firmware

Wcd9385 Firmware

Wcn3610 Firmware

Wcn3660B Firmware

Wcn3680B Firmware

Wcn3980 Firmware

Wcn3988 Firmware

Wcn6850 Firmware

Wcn6851 Firmware

Wcn6855 Firmware

Wcn6856 Firmware

Wcn7850 Firmware

Wcn7851 Firmware

Wsa8830 Firmware

Wsa8835 Firmware

References · 6

• https://qualcomm.com/company/product-security/bulletins/september-2023-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21655 · Security Note
• https://twitter.com/R3dShield/status/1701409012648911025 · Twitter Post
• https://t.me/cibsecurity/69831 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1699008727133622323 · Twitter Post
• https://twitter.com/CVEnew/status/1698948776537235524 · Twitter Post