BDU:2024-02635

Опубликовано: 08 сент. 2023

Источник: fstec

CVSS3: 8.4

CVSS2: 7.2

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана со смещением указателя за границы выделенной памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями с помощью команды IOCTL_KGSL_GPU_AUX_COMMAND

Вендор

Qualcomm Technologies Inc.

Наименование ПО

Qualcomm SXR2130

SD 8 Gen1 5G

AR8035

CSRA6620

CSRA6640

Qualcomm SD865 5G

Qualcomm SD888

Qualcomm SM7250P

Qualcomm SM7315

Qualcomm SM7325P

Qualcomm WCD9341

Qualcomm WCD9370

Qualcomm WCD9375

Qualcomm WCD9380

Qualcomm WCD9385

Qualcomm WCN3988

Qualcomm WCN6740

Qualcomm WSA8810

Qualcomm WSA8815

Qualcomm WSA8830

Qualcomm WSA8835

Qualcomm SW5100

Qualcomm SW5100P

Qualcomm WCD9326

Qualcomm WCD9335

Qualcomm WCN3615

Qualcomm WCN3660B

Qualcomm WCN3680B

Qualcomm WCN3910

Qualcomm WCN3950

Qualcomm WCN3980

Qualcomm WSA8832

Qualcomm SM4125

Qualcomm WCN3990

SD660

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

Snapdragon 8 Gen 1 Mobile Platform

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Qualcomm Smart Audio 400 Platform

Snapdragon 4 Gen 1 Mobile Platform

Snapdragon 662 Mobile Platform

Snapdragon 680 4G Mobile Platform

Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon 690 5G Mobile Platform

Snapdragon 695 5G Mobile Platform

Snapdragon 750G 5G Mobile Platform

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 780G 5G Mobile Platform

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon 7c+ Gen 3 Compute Platform

Snapdragon 8+ Gen 1 Mobile Platform

Snapdragon AR2 Gen 1 Platform

Snapdragon X65 5G Modem-RF System

Snapdragon XR2+ Gen 1 Platform

Qualcomm SSG2115P

Qualcomm SSG2125P

Qualcomm SXR1230P

Qualcomm SXR2230P

215 Mobile Platform

Qualcomm® Video Collaboration VC1 Platform

Qualcomm® Video Collaboration VC3 Platform

Qualcomm SG4150P

Qualcomm SG8275P

Qualcomm SM8550P

Qualcomm Snapdragon 4 Gen 2 Mobile Platform

Qualcomm Snapdragon 439 Mobile Platform

Qualcomm Snapdragon 460 Mobile Platform

Qualcomm Snapdragon 480 5G Mobile Platform

Qualcomm Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon 8 Gen 2 Mobile Platform

Snapdragon 8+ Gen 2 Mobile Platform

Snapdragon Auto 5G Modem-RF

Qualcomm WCD9390

Qualcomm WCD9395

Qualcomm WSA8840

Qualcomm WSA8845

Qualcomm WSA8845H

SA4155P

SA8770P

Snapdragon X12 LTE Modem

QCA6574

QCA6574A

QCA6574AU

Qualcomm® Video Collaboration VC5 Platform

Qualcomm Snapdragon 660 Mobile Platform

SA4150P

SA8775P

FastConnect 6700

FastConnect 6900

FastConnect 7800

QCS4490

QCM4490

QAM8255P

QAM8295P

QAM8650P

QAM8775P

QCA6595

QCA6595AU

QCA6696

QCA6698AQ

QCA6797AQ

QCA8081

QCA8337

QCM5430

QCM6490

QCM8550

QCN6024

QCN9012

QCN9024

QCS410

QCS5430

QCS610

QCS6490

QCS8550

SA6155P

SA8155P

SA8195P

SA8255P

SA8295P

SA9000P

FastConnect 6200

FastConnect 6800

Flight RB5 5G Platform

QCA6174A

QCA6391

QCA6426

QCA6436

QCM2290

QCM4290

QCM4325

QCN9011

QCS2290

QCS4290

QCS7230

QCS8250

QRB5165M

QRB5165N

Robotics RB5 Platform

SA6145P

SA6150P

SA8145P

SA8150P

QCA9377

Версия ПО

- (Qualcomm SXR2130)

- (SD 8 Gen1 5G)

- (AR8035)

- (CSRA6620)

- (CSRA6640)

- (Qualcomm SD865 5G)

- (Qualcomm SD888)

- (Qualcomm SM7250P)

- (Qualcomm SM7315)

- (Qualcomm SM7325P)

- (Qualcomm WCD9341)

- (Qualcomm WCD9370)

- (Qualcomm WCD9375)

- (Qualcomm WCD9380)

- (Qualcomm WCD9385)

- (Qualcomm WCN3988)

- (Qualcomm WCN6740)

- (Qualcomm WSA8810)

- (Qualcomm WSA8815)

- (Qualcomm WSA8830)

- (Qualcomm WSA8835)

- (Qualcomm SW5100)

- (Qualcomm SW5100P)

- (Qualcomm WCD9326)

- (Qualcomm WCD9335)

- (Qualcomm WCN3615)

- (Qualcomm WCN3660B)

- (Qualcomm WCN3680B)

- (Qualcomm WCN3910)

- (Qualcomm WCN3950)

- (Qualcomm WCN3980)

- (Qualcomm WSA8832)

- (Qualcomm SM4125)

- (Qualcomm WCN3990)

- (SD660)

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon W5+ Gen 1 Wearable Platform)

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (Snapdragon 8 Gen 1 Mobile Platform)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 765 5G Mobile Platform (SM7250-AA))

- (Snapdragon 765G 5G Mobile Platform (SM7250-AB))

- (Snapdragon 768G 5G Mobile Platform (SM7250-AC))

- (Qualcomm Smart Audio 400 Platform)

- (Snapdragon 4 Gen 1 Mobile Platform)

- (Snapdragon 662 Mobile Platform)

- (Snapdragon 680 4G Mobile Platform)

- (Snapdragon 685 4G Mobile Platform (SM6225-AD))

- (Snapdragon 690 5G Mobile Platform)

- (Snapdragon 695 5G Mobile Platform)

- (Snapdragon 750G 5G Mobile Platform)

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 780G 5G Mobile Platform)

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon 7c+ Gen 3 Compute Platform)

- (Snapdragon 8+ Gen 1 Mobile Platform)

- (Snapdragon AR2 Gen 1 Platform)

- (Snapdragon X65 5G Modem-RF System)

- (Snapdragon XR2+ Gen 1 Platform)

- (Qualcomm SSG2115P)

- (Qualcomm SSG2125P)

- (Qualcomm SXR1230P)

- (Qualcomm SXR2230P)

- (215 Mobile Platform)

- (Qualcomm® Video Collaboration VC1 Platform)

- (Qualcomm® Video Collaboration VC3 Platform)

- (Qualcomm SG4150P)

- (Qualcomm SG8275P)

- (Qualcomm SM8550P)

- (Qualcomm Snapdragon 4 Gen 2 Mobile Platform)

- (Qualcomm Snapdragon 439 Mobile Platform)

- (Qualcomm Snapdragon 460 Mobile Platform)

- (Qualcomm Snapdragon 480 5G Mobile Platform)

- (Qualcomm Snapdragon 480+ 5G Mobile Platform (SM4350-AC))

- (Snapdragon 8 Gen 2 Mobile Platform)

- (Snapdragon 8+ Gen 2 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF)

- (Qualcomm WCD9390)

- (Qualcomm WCD9395)

- (Qualcomm WSA8840)

- (Qualcomm WSA8845)

- (Qualcomm WSA8845H)

- (SA4155P)

- (SA8770P)

- (Snapdragon X12 LTE Modem)

- (QCA6574)

- (QCA6574A)

- (QCA6574AU)

- (Qualcomm® Video Collaboration VC5 Platform)

- (Qualcomm Snapdragon 660 Mobile Platform)

- (SA4150P)

- (SA8775P)

- (FastConnect 6700)

- (FastConnect 6900)

- (FastConnect 7800)

- (QCS4490)

- (QCM4490)

- (QAM8255P)

- (QAM8295P)

- (QAM8650P)

- (QAM8775P)

- (QCA6595)

- (QCA6595AU)

- (QCA6696)

- (QCA6698AQ)

- (QCA6797AQ)

- (QCA8081)

- (QCA8337)

- (QCM5430)

- (QCM6490)

- (QCM8550)

- (QCN6024)

- (QCN9012)

- (QCN9024)

- (QCS410)

- (QCS5430)

- (QCS610)

- (QCS6490)

- (QCS8550)

- (SA6155P)

- (SA8155P)

- (SA8195P)

- (SA8255P)

- (SA8295P)

- (SA9000P)

- (FastConnect 6200)

- (FastConnect 6800)

- (Flight RB5 5G Platform)

- (QCA6174A)

- (QCA6391)

- (QCA6426)

- (QCA6436)

- (QCM2290)

- (QCM4290)

- (QCM4325)

- (QCN9011)

- (QCS2290)

- (QCS4290)

- (QCS7230)

- (QCS8250)

- (QRB5165M)

- (QRB5165N)

- (Robotics RB5 Platform)

- (SA6145P)

- (SA6150P)

- (SA8145P)

- (SA8150P)

- (QCA9377)

Тип ПО

Микропрограммный код

Сетевое средство

Сетевое программное средство

Операционные системы и аппаратные платформы

Google Inc Android -

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,2)

Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 8,4)

Возможные меры по устранению уязвимости

Использование рекомендаций:

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2023-bulletin.html

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-33106
CVE

EPSS

Процентиль: 37%

0.0016

Низкий

8.4 High

CVSS3

7.2 High

CVSS2

Связанные уязвимости

CVE-2023-33106

CVSS3: 8.4

nvd

около 2 лет назад

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

GHSA-x563-8qf7-q64m

CVSS3: 8.4

github

около 2 лет назад

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

EPSS

Процентиль: 37%

0.0016

Низкий

8.4 High

CVSS3

7.2 High

CVSS2