PT-2024-13101 · Qualcomm · Snapdragon+88

Published 2024-05-06 · Updated 2025-01-15 · CVE-2023-43528

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves information disclosure when the ADSP payload size received in HLOS in response to an Audio Stream Manager matrix session is less than the expected size. This occurs due to a mismatch in the ADSP payload size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

CVE-2023-43528

Affected Products

Snapdragon

Ar8035 Firmware

C-V2X 9150 Firmware

Csrb31024 Firmware

Fastconnect 6800 Firmware

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Msm8996Au Firmware

Qam8255P Firmware

Qam8295P Firmware

Qam8650P Firmware

Qam8775P Firmware

Qamsrv1H Firmware

Qca6310 Firmware

Qca6320 Firmware

Qca6391 Firmware

Qca6426 Firmware

Qca6436 Firmware

Qca6564Au Firmware

Qca6574Au Firmware

Qca6584Au Firmware

Qca6595Au Firmware

Qca6696 Firmware

Qca6698Aq Firmware

Qca8081 Firmware

Qca8337 Firmware

Qca9367 Firmware

Qca9377 Firmware

Qcc710 Firmware

Qcn6224 Firmware

Qcn6274 Firmware

Qcn9074 Firmware

Qcs410 Firmware

Qcs610 Firmware

Qfw7114 Firmware

Qfw7124 Firmware

Sa6145P Firmware

Sa6150P Firmware

Sa6155P Firmware

Sa7255P Firmware

Sa8145P Firmware

Sa8150P Firmware

Sa8155P Firmware

Sa8195P Firmware

Sa8255P Firmware

Sa8295P Firmware

Sa8620P Firmware

Sa8650P Firmware

Sa8770P Firmware

Sa8775P Firmware

Sa9000P Firmware

Sd660 Firmware

Sd835 Firmware

Sd865 5G Firmware

Sdm429W Firmware

Snapdragon 429 Mobile Firmware

Snapdragon 660 Mobile Firmware

Snapdragon 820 Automotive Firmware

Snapdragon 835 Mobile Pc Firmware

Snapdragon 865 5G Mobile Firmware

Snapdragon 870 5G Mobile Firmware

Snapdragon Auto 4G Modem Firmware

Snapdragon Auto 5G Modem-Rf Firmware

Snapdragon Auto 5G Modem-Rf Gen 2 Firmware

Snapdragon Wear 4100+ Firmware

Snapdragon X55 5G Modem-Rf System Firmware

Snapdragon X72 5G Modem-Rf System Firmware

Snapdragon X75 5G Modem-Rf System Firmware

Snapdragon Xr2 5G Firmware

Srv1H Firmware

Sxr2130 Firmware

Video Collaboration Vc1 Firmware

Video Collaboration Vc1 Platform Firmware

Video Collaboration Vc3 Firmware

Video Collaboration Vc3 Platform Firmware

Wcd9335 Firmware

Wcd9340 Firmware

Wcd9341 Firmware

Wcd9370 Firmware

Wcd9380 Firmware

Wcn3610 Firmware

Wcn3620 Firmware

Wcn3660B Firmware

Wcn3680B Firmware

Wcn3950 Firmware

Wcn3980 Firmware

Wcn3990 Firmware

Wsa8810 Firmware

Wsa8815 Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-43528 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html · Vendor Advisory
• https://t.me/cvenotify/107488 · Telegram Post
• https://twitter.com/linuxpatch/status/1787515589210042580 · Twitter Post
• https://twitter.com/CVEnew/status/1787510797519696031 · Twitter Post
• https://t.me/cvenotify/79243 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1787524318949163039 · Twitter Post