CVE-2023-33071

HIGH

8.4

Beschreibung

Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.

CVE Details

CVSS v3.1 Bewertung8.4

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/5/2023

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

qualcomm:qca6574qualcomm:qca6574_firmwarequalcomm:qca6574aqualcomm:qca6574a_firmwarequalcomm:qca6574auqualcomm:qca6574au_firmwarequalcomm:qca6595auqualcomm:qca6595au_firmwarequalcomm:sa6145pqualcomm:sa6145p_firmwarequalcomm:sa6150pqualcomm:sa6150p_firmwarequalcomm:sa6155qualcomm:sa6155_firmwarequalcomm:sa6155pqualcomm:sa6155p_firmwarequalcomm:sa8145pqualcomm:sa8145p_firmwarequalcomm:sa8150pqualcomm:sa8150p_firmwarequalcomm:sa8155qualcomm:sa8155_firmwarequalcomm:sa8155pqualcomm:sa8155p_firmwarequalcomm:sa8195pqualcomm:sa8195p_firmware

Schwachen (CWE)

CWE-284CWE-863

Referenzen

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.