CVE-2023-22668

MEDIUM

6.7

Description

Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

CVE Details

CVSS v3.1 Score6.7

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published12/5/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:aqt1000qualcomm:aqt1000_firmwarequalcomm:ar8035qualcomm:ar8035_firmwarequalcomm:fastconnect_6200qualcomm:fastconnect_6200_firmwarequalcomm:fastconnect_6800qualcomm:fastconnect_6800_firmwarequalcomm:fastconnect_6900qualcomm:fastconnect_6900_firmwarequalcomm:fastconnect_7800qualcomm:fastconnect_7800_firmwarequalcomm:qam8255pqualcomm:qam8255p_firmwarequalcomm:qam8775pqualcomm:qam8775p_firmwarequalcomm:qca6391qualcomm:qca6391_firmwarequalcomm:qca6420qualcomm:qca6420_firmwarequalcomm:qca6426qualcomm:qca6426_firmwarequalcomm:qca6430qualcomm:qca6430_firmwarequalcomm:qca6436qualcomm:qca6436_firmwarequalcomm:qca6584auqualcomm:qca6584au_firmwarequalcomm:qca6698aqqualcomm:qca6698aq_firmwarequalcomm:qca8081qualcomm:qca8081_firmwarequalcomm:qca8337qualcomm:qca8337_firmwarequalcomm:qcc710qualcomm:qcc710_firmwarequalcomm:qcn6224qualcomm:qcn6224_firmwarequalcomm:qcn6274qualcomm:qcn6274_firmwarequalcomm:qfw7114qualcomm:qfw7114_firmwarequalcomm:qfw7124qualcomm:qfw7124_firmwarequalcomm:qualcomm_205_mobile_platformqualcomm:qualcomm_205_mobile_platform_firmwarequalcomm:qualcomm_215_mobile_platformqualcomm:qualcomm_215_mobile_platform_firmwarequalcomm:sa8255pqualcomm:sa8255p_firmwarequalcomm:sa8770pqualcomm:sa8770p_firmwarequalcomm:sa8775pqualcomm:sa8775p_firmwarequalcomm:sa9000pqualcomm:sa9000p_firmwarequalcomm:sd855qualcomm:sd855_firmwarequalcomm:sd865_5gqualcomm:sd865_5g_firmwarequalcomm:snapdragon_210_processorqualcomm:snapdragon_210_processor_firmwarequalcomm:snapdragon_212_mobile_platformqualcomm:snapdragon_212_mobile_platform_firmwarequalcomm:snapdragon_855\+\/860_mobile_platformqualcomm:snapdragon_855\+\/860_mobile_platform_firmwarequalcomm:snapdragon_855_mobile_platformqualcomm:snapdragon_855_mobile_platform_firmwarequalcomm:snapdragon_865\+_5g_mobile_platformqualcomm:snapdragon_865\+_5g_mobile_platform_firmwarequalcomm:snapdragon_865_5g_mobile_platformqualcomm:snapdragon_865_5g_mobile_platform_firmwarequalcomm:snapdragon_870_5g_mobile_platformqualcomm:snapdragon_870_5g_mobile_platform_firmwarequalcomm:snapdragon_auto_5g_modem-rf_gen_2qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmwarequalcomm:snapdragon_w5\+_gen_1_wearable_platformqualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmwarequalcomm:snapdragon_wear_4100\+_platformqualcomm:snapdragon_wear_4100\+_platform_firmwarequalcomm:snapdragon_x55_5g_modem-rf_systemqualcomm:snapdragon_x55_5g_modem-rf_system_firmwarequalcomm:snapdragon_x75_5g_modem-rf_systemqualcomm:snapdragon_x75_5g_modem-rf_system_firmwarequalcomm:snapdragon_xr2_5g_platformqualcomm:snapdragon_xr2_5g_platform_firmwarequalcomm:sw5100qualcomm:sw5100_firmwarequalcomm:sw5100pqualcomm:sw5100p_firmwarequalcomm:sxr2130qualcomm:sxr2130_firmwarequalcomm:wcd9340qualcomm:wcd9340_firmwarequalcomm:wcd9341qualcomm:wcd9341_firmwarequalcomm:wcd9380qualcomm:wcd9380_firmwarequalcomm:wcn3610qualcomm:wcn3610_firmwarequalcomm:wcn3980qualcomm:wcn3980_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wsa8810qualcomm:wsa8810_firmwarequalcomm:wsa8815qualcomm:wsa8815_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Weaknesses (CWE)

CWE-416CWE-416

References

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.