BDU:2024-02815

Опубликовано: 08 сент. 2023

Источник: fstec

CVSS3: 8.4

CVSS2: 7.2

EPSS Низкий

Описание

Уязвимость компонента Graphics Linux микропрограммного обеспечения встраиваемых плат Qualcomm связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями

Вендор

Qualcomm Technologies Inc.

Наименование ПО

Qualcomm SDX55

Qualcomm SA6155P

Qualcomm SXR2130

MDM9650

Qualcomm QCS610

Qualcomm SDM429W

SD 8 Gen1 5G

AQT1000

AR8031

AR8035

CSRA6620

CSRA6640

Qualcomm QCA6391

Qualcomm QCA6420

Qualcomm QCA6421

Qualcomm QCA6426

Qualcomm QCA6430

Qualcomm QCA6431

Qualcomm QCA6436

Qualcomm QCM6490

Qualcomm QCS6490

Qualcomm QRB5165M

Qualcomm QRB5165N

Qualcomm SA9000P

Qualcomm SD865 5G

Qualcomm SD888

Qualcomm SM7250P

Qualcomm SM7315

Qualcomm SM7325P

Qualcomm WCD9340

Qualcomm WCD9341

Qualcomm WCD9370

Qualcomm WCD9375

Qualcomm WCD9380

Qualcomm WCD9385

Qualcomm WCN3988

Qualcomm WCN6740

Qualcomm WSA8810

Qualcomm WSA8815

Qualcomm WSA8835

Qualcomm QCA6174A

Qualcomm QCA6595AU

Qualcomm QCA8081

Qualcomm QCA8337

Qualcomm QCA9377

Qualcomm QCM2290

Qualcomm QCM4290

Qualcomm QCS2290

Qualcomm QCS4290

Qualcomm SA8155P

Qualcomm SA8195P

Qualcomm SW5100

Qualcomm SW5100P

Qualcomm WCD9326

Qualcomm WCD9335

Qualcomm WCN3615

Qualcomm WCN3660B

Qualcomm WCN3680B

Qualcomm WCN3910

Qualcomm WCN3950

Qualcomm WCN3980

Qualcomm WSA8832

Qualcomm CSRB31024

Qualcomm QCA6564

Qualcomm QCA6564AU

Qualcomm QCA6574

Qualcomm QCA6574A

Qualcomm QCA6574AU

Qualcomm QCA6595

Qualcomm QCA6696

Qualcomm QCM6125

Qualcomm QCS410

Qualcomm QCS6125

Qualcomm SA6145P

Qualcomm SA6155

Qualcomm SA8155

Qualcomm SD 675

Qualcomm SD675

Qualcomm SD730

Qualcomm SD855

Qualcomm SM4125

Qualcomm SM6250

WCD9371

Qualcomm WCN3990

Qualcomm APQ8017

Qualcomm MDM9250

Qualcomm MSM8909W

Qualcomm MSM8996AU

Qualcomm QCA6310

Qualcomm QCA6320

Qualcomm SD660

Qualcomm SD835

Qualcomm QCA6335

Qualcomm SD670

Qualcomm WCN3610

Qualcomm WCN3620

Qualcomm WCN3680

Qualcomm QCN6024

Qualcomm QCN9024

Qualcomm QCN9074

Qualcomm FastConnect 6200

Qualcomm FastConnect 6800

Qualcomm FastConnect 6900

Qualcomm QAM8255P

Qualcomm QAM8295P

Qualcomm QCA6698AQ

Qualcomm QCA6797AQ

Qualcomm SA6150P

Qualcomm SA8145P

Qualcomm SA8150P

Qualcomm SA8255P

Qualcomm SA8295P

Snapdragon 429 Mobile Platform

Snapdragon 835 Mobile PC Platform

Snapdragon 855 Mobile Platform

Snapdragon 855+/860 Mobile Platform (SM8150-AC)

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon Wear 4100+ Platform

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

Snapdragon Auto 4G Modem

QSM8250

Snapdragon X50 5G Modem-RF System

Qualcomm FastConnect 7800

Snapdragon 8 Gen 1 Mobile Platform

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Qualcomm FastConnect 6700

Qualcomm Flight RB5 5G Platform

Qualcomm QAM8650P

Qualcomm QAM8775P

Qualcomm QCM4490

Qualcomm QCN9011

Qualcomm QCN9012

Qualcomm QCS4490

Qualcomm QCS8250

Qualcomm QCS8550

Qualcomm Robotics RB3 Platform

Qualcomm Robotics RB5 Platform

Qualcomm Smart Audio 400 Platform

Snapdragon 4 Gen 1 Mobile Platform

Snapdragon 662 Mobile Platform

Snapdragon 665 Mobile Platform

Snapdragon 670 Mobile Platform

Snapdragon 675 Mobile Platform

Snapdragon 678 Mobile Platform (SM6150-AC)

Snapdragon 680 4G Mobile Platform

Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon 690 5G Mobile Platform

Snapdragon 695 5G Mobile Platform

Snapdragon 720G Mobile Platform

Snapdragon 730 Mobile Platform (SM7150-AA)

Snapdragon 730G Mobile Platform (SM7150-AB)

Snapdragon 732G Mobile Platform (SM7150-AC)

Snapdragon 750G 5G Mobile Platform

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 780G 5G Mobile Platform

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon 7c+ Gen 3 Compute Platform

Snapdragon 8+ Gen 1 Mobile Platform

Snapdragon 845 Mobile Platform

Snapdragon AR2 Gen 1 Platform

Snapdragon X24 LTE Modem

Snapdragon X65 5G Modem-RF System

Snapdragon XR2+ Gen 1 Platform

Qualcomm SSG2115P

Qualcomm SSG2125P

Qualcomm SXR1230P

Qualcomm SXR2230P

Qualcomm Vision Intelligence 300 Platform

Qualcomm Vision Intelligence 400 Platform

Qualcomm QCM4325

Qualcomm QCM8550

Qualcomm 205 Mobile Platform

Qualcomm 215 Mobile Platform

Qualcomm® Video Collaboration VC1 Platform

Qualcomm® Video Collaboration VC3 Platform

Qualcomm SG4150P

Qualcomm SG8275P

Qualcomm SM8550P

Qualcomm Snapdragon 210 Processor

Qualcomm Snapdragon 212 Mobile Platform

Qualcomm Snapdragon 4 Gen 2 Mobile Platform

Qualcomm Snapdragon 439 Mobile Platform

Qualcomm Snapdragon 460 Mobile Platform

Qualcomm Snapdragon 480 5G Mobile Platform

Qualcomm Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon 8 Gen 2 Mobile Platform

Snapdragon 8+ Gen 2 Mobile Platform

Snapdragon Auto 5G Modem-RF

Qualcomm WCD9390

Qualcomm WCD9395

Qualcomm WSA8840

Qualcomm WSA8845

Qualcomm WSA8845H

Qualcomm 315 5G IoT Modem

SA4155P

SA8770P

Snapdragon X12 LTE Modem

C-V2X 9150

Qualcomm QCS7230

Qualcomm® Video Collaboration VC5 Platform

Qualcomm SD626

Qualcomm Smart Display 200 Platform (APQ5053-AA)

Qualcomm Snapdragon 636 Mobile Platform

Qualcomm Snapdragon 660 Mobile Platform

Snapdragon 710 Mobile Platform

Snapdragon XR1 Platform

SXR1120

Vision Intelligence 100 Platform (APQ8053-AA)

Vision Intelligence 200 Platform (APQ8053-AC)

Qualcomm QCM5430

Qualcomm QCS5430

SA4150P

SA8775P

Qualcomm APQ8064AU

Qualcomm MSM8108

Qualcomm MSM8209

Qualcomm MSM8608

QCS8155

Qualcomm SDX20M

Qualcomm Smart Audio 200 Platform

Qualcomm Snapdragon 208 Processor

Qualcomm Snapdragon 425 Mobile Platform

Qualcomm Snapdragon 625 Mobile Platform

Qualcomm Snapdragon 626 Mobile Platform

Qualcomm Snapdragon 630 Mobile Platform

Qualcomm Snapdragon 632 Mobile Platform

Qualcomm Snapdragon 820 Automotive Platform

Qualcomm Snapdragon Wear 2100 Platform

Snapdragon Wear 2500 Platform

Snapdragon Wear 3100 Platform

Snapdragon X20 LTE Modem

Версия ПО

- (Qualcomm SDX55)

- (Qualcomm SA6155P)

- (Qualcomm SXR2130)

- (MDM9650)

- (Qualcomm QCS610)

- (Qualcomm SDM429W)

- (SD 8 Gen1 5G)

- (AQT1000)

- (AR8031)

- (AR8035)

- (CSRA6620)

- (CSRA6640)

- (Qualcomm QCA6391)

- (Qualcomm QCA6420)

- (Qualcomm QCA6421)

- (Qualcomm QCA6426)

- (Qualcomm QCA6430)

- (Qualcomm QCA6431)

- (Qualcomm QCA6436)

- (Qualcomm QCM6490)

- (Qualcomm QCS6490)

- (Qualcomm QRB5165M)

- (Qualcomm QRB5165N)

- (Qualcomm SA9000P)

- (Qualcomm SD865 5G)

- (Qualcomm SD888)

- (Qualcomm SM7250P)

- (Qualcomm SM7315)

- (Qualcomm SM7325P)

- (Qualcomm WCD9340)

- (Qualcomm WCD9341)

- (Qualcomm WCD9370)

- (Qualcomm WCD9375)

- (Qualcomm WCD9380)

- (Qualcomm WCD9385)

- (Qualcomm WCN3988)

- (Qualcomm WCN6740)

- (Qualcomm WSA8810)

- (Qualcomm WSA8815)

- (Qualcomm WSA8835)

- (Qualcomm QCA6174A)

- (Qualcomm QCA6595AU)

- (Qualcomm QCA8081)

- (Qualcomm QCA8337)

- (Qualcomm QCA9377)

- (Qualcomm QCM2290)

- (Qualcomm QCM4290)

- (Qualcomm QCS2290)

- (Qualcomm QCS4290)

- (Qualcomm SA8155P)

- (Qualcomm SA8195P)

- (Qualcomm SW5100)

- (Qualcomm SW5100P)

- (Qualcomm WCD9326)

- (Qualcomm WCD9335)

- (Qualcomm WCN3615)

- (Qualcomm WCN3660B)

- (Qualcomm WCN3680B)

- (Qualcomm WCN3910)

- (Qualcomm WCN3950)

- (Qualcomm WCN3980)

- (Qualcomm WSA8832)

- (Qualcomm CSRB31024)

- (Qualcomm QCA6564)

- (Qualcomm QCA6564AU)

- (Qualcomm QCA6574)

- (Qualcomm QCA6574A)

- (Qualcomm QCA6574AU)

- (Qualcomm QCA6595)

- (Qualcomm QCA6696)

- (Qualcomm QCM6125)

- (Qualcomm QCS410)

- (Qualcomm QCS6125)

- (Qualcomm SA6145P)

- (Qualcomm SA6155)

- (Qualcomm SA8155)

- (Qualcomm SD 675)

- (Qualcomm SD675)

- (Qualcomm SD730)

- (Qualcomm SD855)

- (Qualcomm SM4125)

- (Qualcomm SM6250)

- (WCD9371)

- (Qualcomm WCN3990)

- (Qualcomm APQ8017)

- (Qualcomm MDM9250)

- (Qualcomm MSM8909W)

- (Qualcomm MSM8996AU)

- (Qualcomm QCA6310)

- (Qualcomm QCA6320)

- (Qualcomm SD660)

- (Qualcomm SD835)

- (Qualcomm QCA6335)

- (Qualcomm SD670)

- (Qualcomm WCN3610)

- (Qualcomm WCN3620)

- (Qualcomm WCN3680)

- (Qualcomm QCN6024)

- (Qualcomm QCN9024)

- (Qualcomm QCN9074)

- (Qualcomm FastConnect 6200)

- (Qualcomm FastConnect 6800)

- (Qualcomm FastConnect 6900)

- (Qualcomm QAM8255P)

- (Qualcomm QAM8295P)

- (Qualcomm QCA6698AQ)

- (Qualcomm QCA6797AQ)

- (Qualcomm SA6150P)

- (Qualcomm SA8145P)

- (Qualcomm SA8150P)

- (Qualcomm SA8255P)

- (Qualcomm SA8295P)

- (Snapdragon 429 Mobile Platform)

- (Snapdragon 835 Mobile PC Platform)

- (Snapdragon 855 Mobile Platform)

- (Snapdragon 855+/860 Mobile Platform (SM8150-AC))

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon W5+ Gen 1 Wearable Platform)

- (Snapdragon Wear 4100+ Platform)

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (Snapdragon Auto 4G Modem)

- (QSM8250)

- (Snapdragon X50 5G Modem-RF System)

- (Qualcomm FastConnect 7800)

- (Snapdragon 8 Gen 1 Mobile Platform)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 765 5G Mobile Platform (SM7250-AA))

- (Snapdragon 765G 5G Mobile Platform (SM7250-AB))

- (Snapdragon 768G 5G Mobile Platform (SM7250-AC))

- (Qualcomm FastConnect 6700)

- (Qualcomm Flight RB5 5G Platform)

- (Qualcomm QAM8650P)

- (Qualcomm QAM8775P)

- (Qualcomm QCM4490)

- (Qualcomm QCN9011)

- (Qualcomm QCN9012)

- (Qualcomm QCS4490)

- (Qualcomm QCS8250)

- (Qualcomm QCS8550)

- (Qualcomm Robotics RB3 Platform)

- (Qualcomm Robotics RB5 Platform)

- (Qualcomm Smart Audio 400 Platform)

- (Snapdragon 4 Gen 1 Mobile Platform)

- (Snapdragon 662 Mobile Platform)

- (Snapdragon 665 Mobile Platform)

- (Snapdragon 670 Mobile Platform)

- (Snapdragon 675 Mobile Platform)

- (Snapdragon 678 Mobile Platform (SM6150-AC))

- (Snapdragon 680 4G Mobile Platform)

- (Snapdragon 685 4G Mobile Platform (SM6225-AD))

- (Snapdragon 690 5G Mobile Platform)

- (Snapdragon 695 5G Mobile Platform)

- (Snapdragon 720G Mobile Platform)

- (Snapdragon 730 Mobile Platform (SM7150-AA))

- (Snapdragon 730G Mobile Platform (SM7150-AB))

- (Snapdragon 732G Mobile Platform (SM7150-AC))

- (Snapdragon 750G 5G Mobile Platform)

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 780G 5G Mobile Platform)

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon 7c+ Gen 3 Compute Platform)

- (Snapdragon 8+ Gen 1 Mobile Platform)

- (Snapdragon 845 Mobile Platform)

- (Snapdragon AR2 Gen 1 Platform)

- (Snapdragon X24 LTE Modem)

- (Snapdragon X65 5G Modem-RF System)

- (Snapdragon XR2+ Gen 1 Platform)

- (Qualcomm SSG2115P)

- (Qualcomm SSG2125P)

- (Qualcomm SXR1230P)

- (Qualcomm SXR2230P)

- (Qualcomm Vision Intelligence 300 Platform)

- (Qualcomm Vision Intelligence 400 Platform)

- (Qualcomm QCM4325)

- (Qualcomm QCM8550)

- (Qualcomm 205 Mobile Platform)

- (Qualcomm 215 Mobile Platform)

- (Qualcomm® Video Collaboration VC1 Platform)

- (Qualcomm® Video Collaboration VC3 Platform)

- (Qualcomm SG4150P)

- (Qualcomm SG8275P)

- (Qualcomm SM8550P)

- (Qualcomm Snapdragon 210 Processor)

- (Qualcomm Snapdragon 212 Mobile Platform)

- (Qualcomm Snapdragon 4 Gen 2 Mobile Platform)

- (Qualcomm Snapdragon 439 Mobile Platform)

- (Qualcomm Snapdragon 460 Mobile Platform)

- (Qualcomm Snapdragon 480 5G Mobile Platform)

- (Qualcomm Snapdragon 480+ 5G Mobile Platform (SM4350-AC))

- (Snapdragon 8 Gen 2 Mobile Platform)

- (Snapdragon 8+ Gen 2 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF)

- (Qualcomm WCD9390)

- (Qualcomm WCD9395)

- (Qualcomm WSA8840)

- (Qualcomm WSA8845)

- (Qualcomm WSA8845H)

- (Qualcomm 315 5G IoT Modem)

- (SA4155P)

- (SA8770P)

- (Snapdragon X12 LTE Modem)

- (C-V2X 9150)

- (Qualcomm QCS7230)

- (Qualcomm® Video Collaboration VC5 Platform)

- (Qualcomm SD626)

- (Qualcomm Smart Display 200 Platform (APQ5053-AA))

- (Qualcomm Snapdragon 636 Mobile Platform)

- (Qualcomm Snapdragon 660 Mobile Platform)

- (Snapdragon 710 Mobile Platform)

- (Snapdragon XR1 Platform)

- (SXR1120)

- (Vision Intelligence 100 Platform (APQ8053-AA))

- (Vision Intelligence 200 Platform (APQ8053-AC))

- (Qualcomm QCM5430)

- (Qualcomm QCS5430)

- (SA4150P)

- (SA8775P)

- (Qualcomm APQ8064AU)

- (Qualcomm MSM8108)

- (Qualcomm MSM8209)

- (Qualcomm MSM8608)

- (QCS8155)

- (Qualcomm SDX20M)

- (Qualcomm Smart Audio 200 Platform)

- (Qualcomm Snapdragon 208 Processor)

- (Qualcomm Snapdragon 425 Mobile Platform)

- (Qualcomm Snapdragon 625 Mobile Platform)

- (Qualcomm Snapdragon 626 Mobile Platform)

- (Qualcomm Snapdragon 630 Mobile Platform)

- (Qualcomm Snapdragon 632 Mobile Platform)

- (Qualcomm Snapdragon 820 Automotive Platform)

- (Qualcomm Snapdragon Wear 2100 Platform)

- (Snapdragon Wear 2500 Platform)

- (Snapdragon Wear 3100 Platform)

- (Snapdragon X20 LTE Modem)

Тип ПО

Микропрограммный код

Микропрограммный код аппаратных компонент компьютера

Сетевое средство

Сетевое программное средство

Операционные системы и аппаратные платформы

Google Inc Android -

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,2)

Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 8,4)

Возможные меры по устранению уязвимости

Использование рекомендаций:

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-33107
CVE

EPSS

Процентиль: 48%

0.00246

Низкий

8.4 High

CVSS3

7.2 High

CVSS2

Связанные уязвимости

CVE-2023-33107

CVSS3: 8.4

nvd

около 2 лет назад

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

GHSA-wg3g-ggh3-7wgp

CVSS3: 8.4

github

около 2 лет назад

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

EPSS

Процентиль: 48%

0.00246

Низкий

8.4 High

CVSS3

7.2 High

CVSS2