Lucene search

K
vulnrichmentQualcommVULNRICHMENT:CVE-2023-43524
HistoryMay 06, 2024 - 2:32 p.m.

CVE-2023-43524 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

2024-05-0614:32:03
CWE-120
qualcomm
github.com
1
cve-2023-43524
buffer overflow
audio

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "ar8035_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "fastconnect_6800_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "fastconnect_6900_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "fastconnect_7800_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qam8255p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qam8295p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qam8650p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qam8775p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qamsrv1h_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qamsrv1m_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6391_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6426_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6436_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6574au_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6584au_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6696_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca6698aq_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca8081_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca8337_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca9367_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qca9377_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcc710_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcn6224_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qcn6274_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qfw7114_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "qfw7124_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sa6145p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sa6150p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "qualcomm",
    "product": "sa6155p_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-43524