Lucene search

QualcommCVE-2023-43516

HistoryFeb 06, 2024 - 6:16 a.m.

CVE-2023-43516

2024-02-0606:16:01

CWE-787

CWE-823

qualcomm

web.nvd.nist.gov

cve

memory corruption

malformed message payload

firmware

security vulnerability

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

9.5%

JSON

Memory corruption when malformed message payload is received from firmware.

Affected configurations

Nvd

Node

qualcommfastconnect_6900_firmwareMatch-

AND

qualcommfastconnect_6900Match-

Node

qualcommfastconnect_7800_firmwareMatch-

AND

qualcommfastconnect_7800Match-

Node

qualcommqcm8550_firmwareMatch-

AND

qualcommqcm8550Match-

Node

qualcommqcs8550_firmwareMatch-

AND

qualcommqcs8550Match-

Node

qualcommsnapdragon_8_gen_1_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8_gen_1_mobile_platformMatch-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommfastconnect_6900_firmware-cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
qualcommfastconnect_6900-cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*
qualcommfastconnect_7800_firmware-cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
qualcommfastconnect_7800-cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
qualcommqcm8550_firmware-cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*
qualcommqcm8550-cpe:2.3:h:qualcomm:qcm8550:-:*:*:*:*:*:*:*
qualcommqcs8550_firmware-cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*
qualcommqcs8550-cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*
qualcommsnapdragon_8_gen_1_mobile_platform_firmware-cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
qualcommsnapdragon_8_gen_1_mobile_platform-cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	fastconnect_6900_firmware	-	cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:::::::*
qualcomm	fastconnect_6900	-	cpe:2.3:h:qualcomm:fastconnect_6900:-:::::::*
qualcomm	fastconnect_7800_firmware	-	cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::*
qualcomm	fastconnect_7800	-	cpe:2.3:h:qualcomm:fastconnect_7800:-:::::::*
qualcomm	qcm8550_firmware	-	cpe:2.3:o:qualcomm:qcm8550_firmware:-:::::::*
qualcomm	qcm8550	-	cpe:2.3:h:qualcomm:qcm8550:-:::::::*
qualcomm	qcs8550_firmware	-	cpe:2.3:o:qualcomm:qcs8550_firmware:-:::::::*
qualcomm	qcs8550	-	cpe:2.3:h:qualcomm:qcs8550:-:::::::*
qualcomm	snapdragon_8_gen_1_mobile_platform_firmware	-	cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:::::::*
qualcomm	snapdragon_8_gen_1_mobile_platform	-	cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:::::::*

Rows per page:

1-10 of 161

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QCM8550"
      },
      {
        "status": "affected",
        "version": "QCS8550"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2023-43516