by Kastro
Paper/Archive/CVE-2023-21643

CVE-2023-21643

Qualcomm, Inc. Snapdragon — Untrusted Pointer Dereference in Automotive

EPSS 0.2%CVSS 9.1
critical.is priorityof 100
30
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 15.0.150 × 203.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Memory corruption due to untrusted pointer dereference in automotive during system call.

Affected

ProductAffectedFixed inSource
SnapdragonAPQ8064AU–CNA
SnapdragonAPQ8096AU–CNA
SnapdragonMSM8996AU–CNA
SnapdragonQAM8295P–CNA
SnapdragonQCA6564A–CNA
SnapdragonQCA6564AU–CNA
SnapdragonQCA6574A–CNA
SnapdragonQCA6574AU–CNA
SnapdragonQCA6584AU–CNA
SnapdragonQCA6595–CNA
SnapdragonQCA6595AU–CNA
SnapdragonQCA6696–CNA

Scores by source

qualcomm (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

References

refqualcomm.com/company/product-security/bulletins/august-2023-bulletin