by Kastro
Paper/Archive/CVE-2023-33072

CVE-2023-33072

Qualcomm, Inc. Snapdragon — Buffer copy without checking size of Input in Core

EPSS 0.1%CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 1.3.013 × 200.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption in Core while processing control functions.

Affected

ProductAffectedFixed inSource
Snapdragon315 5G IoT Modem–CNA
Snapdragon9205 LTE Modem–CNA
SnapdragonAQT1000–CNA
SnapdragonAR8031–CNA
SnapdragonAR8035–CNA
SnapdragonCSRA6620–CNA
SnapdragonCSRA6640–CNA
SnapdragonCSRB31024–CNA
SnapdragonFastConnect 6200–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6800–CNA
SnapdragonFastConnect 6900–CNA

Scores by source

qualcomm (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refqualcomm.com/company/product-security/bulletins/february-2024-bulletin