BDU:2024-02772

Опубликовано: 02 мая 2023

Источник: fstec

CVSS3: 8.4

CVSS2: 7.2

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с недостатком механизма преобразования типов данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Вендор

Qualcomm Technologies Inc.

Наименование ПО

Qualcomm SDX55

Qualcomm SXR2130

MDM9650

Qualcomm SDM429W

AQT1000

AR8031

AR8035

CSRA6620

CSRA6640

Qualcomm SD865 5G

Qualcomm SD888

Qualcomm SM7250P

Qualcomm SM7315

Qualcomm SM7325P

Qualcomm WCD9340

Qualcomm WCD9341

Qualcomm WCD9370

Qualcomm WCD9375

Qualcomm WCD9380

Qualcomm WCD9385

Qualcomm WCN3988

Qualcomm WCN6740

Qualcomm WSA8810

Qualcomm WSA8815

Qualcomm WSA8830

Qualcomm WSA8835

Qualcomm SW5100

Qualcomm SW5100P

Qualcomm WCD9326

Qualcomm WCD9335

Qualcomm WCN3615

Qualcomm WCN3680B

Qualcomm WCN3910

Qualcomm WCN3950

Qualcomm WCN3980

SD675

SD730

Qualcomm SD855

Qualcomm SM4125

Qualcomm SM6250

Qualcomm SM6250P

WCD9371

Qualcomm WCN3990

Qualcomm WCN3999

Qualcomm SD835

SD670

Qualcomm WCD9330

Qualcomm WCN3610

Qualcomm WCN3620

Qualcomm WCN3680

Qualcomm WCN3660

Snapdragon 429 Mobile Platform

Snapdragon 835 Mobile PC Platform

Snapdragon 855 Mobile Platform

Snapdragon 855+/860 Mobile Platform (SM8150-AC)

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon Wear 4100+ Platform

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

QSM8250

Snapdragon X50 5G Modem-RF System

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Qualcomm Smart Audio 400 Platform

Snapdragon 4 Gen 1 Mobile Platform

Snapdragon 460 Mobile Platform

Snapdragon 480 5G Mobile Platform

Snapdragon 662 Mobile Platform

Snapdragon 665 Mobile Platform

Snapdragon 670 Mobile Platform

Snapdragon 675 Mobile Platform

Snapdragon 678 Mobile Platform (SM6150-AC)

Snapdragon 680 4G Mobile Platform

Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon 690 5G Mobile Platform

Snapdragon 695 5G Mobile Platform

Snapdragon 720G Mobile Platform

Snapdragon 730 Mobile Platform (SM7150-AA)

Snapdragon 730G Mobile Platform (SM7150-AB)

Snapdragon 732G Mobile Platform (SM7150-AC)

Snapdragon 750G 5G Mobile Platform

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 780G 5G Mobile Platform

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon 7c+ Gen 3 Compute Platform

Snapdragon 845 Mobile Platform

Snapdragon X24 LTE Modem

Snapdragon X65 5G Modem-RF System

Snapdragon XR2+ Gen 1 Platform

Qualcomm Vision Intelligence 400 Platform

205 Mobile Platform

215 Mobile Platform

Qualcomm Snapdragon 210 Processor

Qualcomm Snapdragon 212 Mobile Platform

Qualcomm Snapdragon 439 Mobile Platform

Qualcomm Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon Auto 5G Modem-RF

SA4155P

Snapdragon X12 LTE Modem

QCA6564AU

QCA6574

QCA6574A

QCA6574AU

QCA6584AU

C-V2X 9150

SD626

Qualcomm Smart Display 200 Platform (APQ5053-AA)

Qualcomm Snapdragon 660 Mobile Platform

Snapdragon 710 Mobile Platform

Snapdragon XR1 Platform

SXR1120

Vision Intelligence 100 Platform (APQ8053-AA)

Vision Intelligence 200 Platform (APQ8053-AC)

SA4150P

MSM8108

MSM8209

MSM8608

QCS8155

Qualcomm SDX20M

Qualcomm Smart Audio 200 Platform

Qualcomm Snapdragon 208 Processor

Qualcomm Snapdragon 425 Mobile Platform

Qualcomm Snapdragon 625 Mobile Platform

Qualcomm Snapdragon 626 Mobile Platform

Qualcomm Snapdragon 632 Mobile Platform

Qualcomm Snapdragon 820 Automotive Platform

Snapdragon X20 LTE Modem

9206 LTE Modem

APQ8052

APQ8056

APQ8076

Home Hub 100 Platform

QCA6174

Snapdragon 1200 Wearable Platform

Snapdragon 450 Mobile Platform

Snapdragon 617 Processor

Snapdragon 650 Mobile Platform

Snapdragon 652 Mobile Platform

Snapdragon 653 Mobile Platform

Snapdragon X5 LTE Modem

FastConnect 6700

FastConnect 6900

QAM8295P

QCA6595

QCA6595AU

QCA6696

QCA6698AQ

QCA8081

QCA8337

QCM6490

QCN6024

QCN9012

QCN9024

QCN9074

QCS410

QCS610

QCS6490

SA6155P

SA8155P

SA8195P

SA8295P

APQ8017

FastConnect 6200

FastConnect 6800

Flight RB5 5G Platform

QCA6174A

QCA6391

QCA6420

QCA6421

QCA6426

QCA6430

QCA6431

QCA6436

QCA9379

QCM2290

QCM4290

QCM6125

QCN9011

QCS2290

QCS4290

QCS6125

QCS8250

QRB5165N

Robotics RB5 Platform

SA6145P

SA6150P

SA6155

SA8145P

SA8150P

SA8155

315 5G IoT Modem

APQ8064AU

CSRB31024

Robotics RB3 Platform

QCA6310

QCA6335

QCA6564A

QCA9377

MSM8996AU

QCA6320

QCA6564

MDM9250

MDM9628

QCA9367

Версия ПО

- (Qualcomm SDX55)

- (Qualcomm SXR2130)

- (MDM9650)

- (Qualcomm SDM429W)

- (AQT1000)

- (AR8031)

- (AR8035)

- (CSRA6620)

- (CSRA6640)

- (Qualcomm SD865 5G)

- (Qualcomm SD888)

- (Qualcomm SM7250P)

- (Qualcomm SM7315)

- (Qualcomm SM7325P)

- (Qualcomm WCD9340)

- (Qualcomm WCD9341)

- (Qualcomm WCD9370)

- (Qualcomm WCD9375)

- (Qualcomm WCD9380)

- (Qualcomm WCD9385)

- (Qualcomm WCN3988)

- (Qualcomm WCN6740)

- (Qualcomm WSA8810)

- (Qualcomm WSA8815)

- (Qualcomm WSA8830)

- (Qualcomm WSA8835)

- (Qualcomm SW5100)

- (Qualcomm SW5100P)

- (Qualcomm WCD9326)

- (Qualcomm WCD9335)

- (Qualcomm WCN3615)

- (Qualcomm WCN3680B)

- (Qualcomm WCN3910)

- (Qualcomm WCN3950)

- (Qualcomm WCN3980)

- (SD675)

- (SD730)

- (Qualcomm SD855)

- (Qualcomm SM4125)

- (Qualcomm SM6250)

- (Qualcomm SM6250P)

- (WCD9371)

- (Qualcomm WCN3990)

- (Qualcomm WCN3999)

- (Qualcomm SD835)

- (SD670)

- (Qualcomm WCD9330)

- (Qualcomm WCN3610)

- (Qualcomm WCN3620)

- (Qualcomm WCN3680)

- (Qualcomm WCN3660)

- (Snapdragon 429 Mobile Platform)

- (Snapdragon 835 Mobile PC Platform)

- (Snapdragon 855 Mobile Platform)

- (Snapdragon 855+/860 Mobile Platform (SM8150-AC))

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon W5+ Gen 1 Wearable Platform)

- (Snapdragon Wear 4100+ Platform)

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (QSM8250)

- (Snapdragon X50 5G Modem-RF System)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 765 5G Mobile Platform (SM7250-AA))

- (Snapdragon 765G 5G Mobile Platform (SM7250-AB))

- (Snapdragon 768G 5G Mobile Platform (SM7250-AC))

- (Qualcomm Smart Audio 400 Platform)

- (Snapdragon 4 Gen 1 Mobile Platform)

- (Snapdragon 460 Mobile Platform)

- (Snapdragon 480 5G Mobile Platform)

- (Snapdragon 662 Mobile Platform)

- (Snapdragon 665 Mobile Platform)

- (Snapdragon 670 Mobile Platform)

- (Snapdragon 675 Mobile Platform)

- (Snapdragon 678 Mobile Platform (SM6150-AC))

- (Snapdragon 680 4G Mobile Platform)

- (Snapdragon 685 4G Mobile Platform (SM6225-AD))

- (Snapdragon 690 5G Mobile Platform)

- (Snapdragon 695 5G Mobile Platform)

- (Snapdragon 720G Mobile Platform)

- (Snapdragon 730 Mobile Platform (SM7150-AA))

- (Snapdragon 730G Mobile Platform (SM7150-AB))

- (Snapdragon 732G Mobile Platform (SM7150-AC))

- (Snapdragon 750G 5G Mobile Platform)

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 780G 5G Mobile Platform)

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon 7c+ Gen 3 Compute Platform)

- (Snapdragon 845 Mobile Platform)

- (Snapdragon X24 LTE Modem)

- (Snapdragon X65 5G Modem-RF System)

- (Snapdragon XR2+ Gen 1 Platform)

- (Qualcomm Vision Intelligence 400 Platform)

- (205 Mobile Platform)

- (215 Mobile Platform)

- (Qualcomm Snapdragon 210 Processor)

- (Qualcomm Snapdragon 212 Mobile Platform)

- (Qualcomm Snapdragon 439 Mobile Platform)

- (Qualcomm Snapdragon 480+ 5G Mobile Platform (SM4350-AC))

- (Snapdragon Auto 5G Modem-RF)

- (SA4155P)

- (Snapdragon X12 LTE Modem)

- (QCA6564AU)

- (QCA6574)

- (QCA6574A)

- (QCA6574AU)

- (QCA6584AU)

- (C-V2X 9150)

- (SD626)

- (Qualcomm Smart Display 200 Platform (APQ5053-AA))

- (Qualcomm Snapdragon 660 Mobile Platform)

- (Snapdragon 710 Mobile Platform)

- (Snapdragon XR1 Platform)

- (SXR1120)

- (Vision Intelligence 100 Platform (APQ8053-AA))

- (Vision Intelligence 200 Platform (APQ8053-AC))

- (SA4150P)

- (MSM8108)

- (MSM8209)

- (MSM8608)

- (QCS8155)

- (Qualcomm SDX20M)

- (Qualcomm Smart Audio 200 Platform)

- (Qualcomm Snapdragon 208 Processor)

- (Qualcomm Snapdragon 425 Mobile Platform)

- (Qualcomm Snapdragon 625 Mobile Platform)

- (Qualcomm Snapdragon 626 Mobile Platform)

- (Qualcomm Snapdragon 632 Mobile Platform)

- (Qualcomm Snapdragon 820 Automotive Platform)

- (Snapdragon X20 LTE Modem)

- (9206 LTE Modem)

- (APQ8052)

- (APQ8056)

- (APQ8076)

- (Home Hub 100 Platform)

- (QCA6174)

- (Snapdragon 1200 Wearable Platform)

- (Snapdragon 450 Mobile Platform)

- (Snapdragon 617 Processor)

- (Snapdragon 650 Mobile Platform)

- (Snapdragon 652 Mobile Platform)

- (Snapdragon 653 Mobile Platform)

- (Snapdragon X5 LTE Modem)

- (FastConnect 6700)

- (FastConnect 6900)

- (QAM8295P)

- (QCA6595)

- (QCA6595AU)

- (QCA6696)

- (QCA6698AQ)

- (QCA8081)

- (QCA8337)

- (QCM6490)

- (QCN6024)

- (QCN9012)

- (QCN9024)

- (QCN9074)

- (QCS410)

- (QCS610)

- (QCS6490)

- (SA6155P)

- (SA8155P)

- (SA8195P)

- (SA8295P)

- (APQ8017)

- (FastConnect 6200)

- (FastConnect 6800)

- (Flight RB5 5G Platform)

- (QCA6174A)

- (QCA6391)

- (QCA6420)

- (QCA6421)

- (QCA6426)

- (QCA6430)

- (QCA6431)

- (QCA6436)

- (QCA9379)

- (QCM2290)

- (QCM4290)

- (QCM6125)

- (QCN9011)

- (QCS2290)

- (QCS4290)

- (QCS6125)

- (QCS8250)

- (QRB5165N)

- (Robotics RB5 Platform)

- (SA6145P)

- (SA6150P)

- (SA6155)

- (SA8145P)

- (SA8150P)

- (SA8155)

- (315 5G IoT Modem)

- (APQ8064AU)

- (CSRB31024)

- (Robotics RB3 Platform)

- (QCA6310)

- (QCA6335)

- (QCA6564A)

- (QCA9377)

- (MSM8996AU)

- (QCA6320)

- (QCA6564)

- (MDM9250)

- (MDM9628)

- (QCA9367)

Тип ПО

Микропрограммный код

Сетевое средство

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,2)

Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 8,4)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-21665
CVE

EPSS

Процентиль: 23%

0.00078

Низкий

8.4 High

CVSS3

7.2 High

CVSS2

Связанные уязвимости

CVE-2023-21665

CVSS3: 8.4

nvd

почти 3 года назад

Memory corruption in Graphics while importing a file.

GHSA-vhmc-97xx-rvxh

CVSS3: 8.4

github

почти 3 года назад

Memory corruption in Graphics while importing a file.

EPSS

Процентиль: 23%

0.00078

Низкий

8.4 High

CVSS3

7.2 High

CVSS2