gsd-2023-21671
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Aliases
Aliases
{ GSD: { alias: "CVE-2023-21671", id: "GSD-2023-21671", }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2023-21671", ], details: "Memory Corruption in Core during syscall for Sectools Fuse comparison feature.", id: "GSD-2023-21671", modified: "2023-12-13T01:20:25.702641Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "product-security@qualcomm.com", ID: "CVE-2023-21671", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Snapdragon", version: { version_data: [ { version_affected: "=", version_value: "FastConnect 6700", }, { version_affected: "=", version_value: "FastConnect 6900", }, { version_affected: "=", version_value: "QCA6391", }, { version_affected: "=", version_value: "QCM6490", }, { version_affected: "=", version_value: "QCS6490", }, { version_affected: "=", version_value: "QSM8350", }, { version_affected: "=", version_value: "Qualcomm Video Collaboration VC3 Platform", }, { version_affected: "=", version_value: "SD888", }, { version_affected: "=", version_value: "SM7315", }, { version_affected: "=", version_value: "SM7325P", }, { version_affected: "=", version_value: "Snapdragon 778G 5G Mobile Platform", }, { version_affected: "=", version_value: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { version_affected: "=", version_value: "Snapdragon 780G 5G Mobile Platform", }, { version_affected: "=", version_value: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { version_affected: "=", version_value: "Snapdragon 7c+ Gen 3 Compute", }, { version_affected: "=", version_value: "Snapdragon 888 5G Mobile Platform", }, { version_affected: "=", version_value: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { version_affected: "=", version_value: "WCD9370", }, { version_affected: "=", version_value: "WCD9375", }, { version_affected: "=", version_value: "WCD9380", }, { version_affected: "=", version_value: "WCD9385", }, { version_affected: "=", version_value: "WCN6740", }, { version_affected: "=", version_value: "WSA8830", }, { version_affected: "=", version_value: "WSA8835", }, ], }, }, ], }, vendor_name: "Qualcomm, Inc.", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Memory Corruption in Core during syscall for Sectools Fuse comparison feature.", }, ], }, impact: { cvss: [ { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 9.3, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, ], }, problemtype: { problemtype_data: [ { description: [ { cweId: "CWE-20", lang: "eng", value: "CWE-20 Improper Input Validation", }, ], }, ], }, references: { reference_data: [ { name: "https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin", refsource: "MISC", url: "https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin", }, ], }, }, "nvd.nist.gov": { cve: { configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "82B82E87-F3F4-466F-A76B-C8809121FF6F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*", matchCriteriaId: "419A132E-E42C-4395-B74B-788A39DF1D13", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "E670F500-9B71-4BBE-B5DA-221D35803C89", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*", matchCriteriaId: "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "83B53119-1B2F-4978-B7F5-33B84BE73B68", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*", matchCriteriaId: "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "ADD6D51E-5787-42A6-8A02-4EBBAFFF9C94", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*", matchCriteriaId: "99AA0291-B822-4CAD-BA17-81B632FC3FEF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "403AE561-6C9E-49F3-A5D6-C48DDD51D663", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*", matchCriteriaId: "6FAC140F-FC5E-4C88-B777-7F5EBF49A695", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qsm8350_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1894F6B9-31DA-44E8-AA28-064F73EBEE8D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qsm8350:-:*:*:*:*:*:*:*", matchCriteriaId: "8AA23845-D9F5-4035-8A93-F475D865586F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C20F4F14-D940-41AE-AFBC-D08A24FAE1A2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc3_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "F36CEF6E-97A9-4D01-A406-574EA7CB025B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "79219DA5-0D09-4CEF-AEFD-917F269AE7DF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*", matchCriteriaId: "4D30BACF-71C1-4A6D-8811-9AD708A98307", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "A4508742-7D97-43D8-B8F5-041F4C588723", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*", matchCriteriaId: "CF8C63E8-169F-4164-BD49-348ED894813F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4BEC725F-19B1-4078-B13D-CE624BE23344", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*", matchCriteriaId: "4EA43E38-A12D-49C3-B05C-A2AF07ED2710", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "87ECCB82-B880-412D-A635-CA6F0B035F2B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_778g_5g_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "424743C4-CE74-4A02-835A-023C9DA0CFAC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_778g\\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "14EA48BF-BD65-43B2-8DC1-D97F75AD6FE5", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_778g\\+_5g_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "B86E317F-12BF-42F6-879B-88A85F7E3F81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "A4C68227-8928-41C4-A6B8-CD142C018AB6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_780g_5g_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "38E60ED4-9FB7-481E-915B-B7576566E0BC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_782g_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "194A4BD4-0DDF-49E5-AA89-40A5BFB71933", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_782g_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "72FF9732-40D8-4C12-8259-BAA16FAB5A56", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_7c\\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C4A050CA-8514-400A-A6B3-F513CC93CA14", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_7c\\+_gen_3_compute:-:*:*:*:*:*:*:*", matchCriteriaId: "BD850305-1E76-4952-A3FB-F6229CBF7FE9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "22A78236-5965-4F65-9001-3FE7FF6D27E8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_888_5g_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "414C5C1D-A5DA-47C7-B6C9-3564DD4DD911", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_888\\+_5g_mobile_platform__firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1C389394-72C4-4647-B97A-A7B2DADF57FD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_888\\+_5g_mobile_platform_:-:*:*:*:*:*:*:*", matchCriteriaId: "945B1D8C-1B53-4BC0-8048-43C7C365B22F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1295D869-F4DD-4766-B4AA-3513752F43B4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*", matchCriteriaId: "B98784DC-3143-4D38-AD28-DBBDCCAB4272", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "34143ABA-7D09-429F-A65C-3A33438BF62C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*", matchCriteriaId: "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "70292B01-617F-44AD-AF77-1AFC1450523D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*", matchCriteriaId: "FA94C6D6-85DB-4031-AAF4-C399019AE16D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "92B17201-8185-47F1-9720-5AB4ECD11B22", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*", matchCriteriaId: "E1FA2EB9-416F-4D69-8786-386CC73978AE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "FB5DB2B8-25E1-4C0F-8AFB-7627FF9A04E1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*", matchCriteriaId: "9BB21B3F-6D07-4B45-8A71-DC5490176296", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "11B69595-E488-4590-A150-CE5BE08B5E13", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*", matchCriteriaId: "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F80BC68E-7476-4A40-9F48-53722FE9A5BF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*", matchCriteriaId: "6B36F4B2-BAA3-45AD-9967-0EB482C99708", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], descriptions: [ { lang: "en", value: "Memory Corruption in Core during syscall for Sectools Fuse comparison feature.", }, { lang: "es", value: "CorrupciĂłn de la memoria en Core durante la llamada al sistema para la funciĂłn de comparaciĂłn de Sectools Fuse.", }, ], id: "CVE-2023-21671", lastModified: "2024-04-12T17:16:52.133", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 1.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 9.3, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.5, impactScore: 6, source: "product-security@qualcomm.com", type: "Secondary", }, ], }, published: "2023-11-07T06:15:08.253", references: [ { source: "product-security@qualcomm.com", tags: [ "Vendor Advisory", ], url: "https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin", }, ], sourceIdentifier: "product-security@qualcomm.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-20", }, ], source: "product-security@qualcomm.com", type: "Secondary", }, ], }, }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.