7.8

CVE-2023-33034

Signed-to-unsigned conversion error in Audio

Memory corruption while parsing the ADSP response command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Csra6620 Firmware Version -
   Qualcomm ≫ Csra6620 Version -
Qualcomm ≫ Csra6640 Firmware Version -
   Qualcomm ≫ Csra6640 Version -
Qualcomm ≫ Wcn3991 Firmware Version -
   Qualcomm ≫ Wcn3991 Version -
Qualcomm ≫ Wcn3998 Firmware Version -
   Qualcomm ≫ Wcn3998 Version -
Qualcomm ≫ Wcn6750 Firmware Version -
   Qualcomm ≫ Wcn6750 Version -
Qualcomm ≫ Wcn685x-5 Firmware Version -
   Qualcomm ≫ Wcn685x-5 Version -
Qualcomm ≫ Wcn685x-1 Firmware Version -
   Qualcomm ≫ Wcn685x-1 Version -
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p Version -
Qualcomm ≫ Qca6391 Firmware Version -
   Qualcomm ≫ Qca6391 Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595 Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq Version -
Qualcomm ≫ Qcm6490 Firmware Version -
   Qualcomm ≫ Qcm6490 Version -
Qualcomm ≫ Qcn9011 Firmware Version -
   Qualcomm ≫ Qcn9011 Version -
Qualcomm ≫ Qcn9012 Firmware Version -
   Qualcomm ≫ Qcn9012 Version -
Qualcomm ≫ Qcs410 Firmware Version -
   Qualcomm ≫ Qcs410 Version -
Qualcomm ≫ Qcs610 Firmware Version -
   Qualcomm ≫ Qcs610 Version -
Qualcomm ≫ Qcs6490 Firmware Version -
   Qualcomm ≫ Qcs6490 Version -
Qualcomm ≫ Qrb5165m Firmware Version -
   Qualcomm ≫ Qrb5165m Version -
Qualcomm ≫ Qrb5165n Firmware Version -
   Qualcomm ≫ Qrb5165n Version -
Qualcomm ≫ Sa4150p Firmware Version -
   Qualcomm ≫ Sa4150p Version -
Qualcomm ≫ Sa4155p Firmware Version -
   Qualcomm ≫ Sa4155p Version -
Qualcomm ≫ Sa6145p Firmware Version -
   Qualcomm ≫ Sa6145p Version -
Qualcomm ≫ Sa6150p Firmware Version -
   Qualcomm ≫ Sa6150p Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Sa8145p Firmware Version -
   Qualcomm ≫ Sa8145p Version -
Qualcomm ≫ Sa8150p Firmware Version -
   Qualcomm ≫ Sa8150p Version -
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p Version -
Qualcomm ≫ Sa8195p Firmware Version -
   Qualcomm ≫ Sa8195p Version -
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p Version -
Qualcomm ≫ Sd888 Firmware Version -
   Qualcomm ≫ Sd888 Version -
Qualcomm ≫ Sm7315 Firmware Version -
   Qualcomm ≫ Sm7315 Version -
Qualcomm ≫ Sm7325p Firmware Version -
   Qualcomm ≫ Sm7325p Version -
Qualcomm ≫ Apq5053-aa Firmware Version -
   Qualcomm ≫ Apq5053-aa Version -
Qualcomm ≫ Sm4375 Firmware Version -
   Qualcomm ≫ Sm4375 Version -
Qualcomm ≫ Sm4350-ac Firmware Version -
   Qualcomm ≫ Sm4350-ac Version -
Qualcomm ≫ Sm6375 Firmware Version -
   Qualcomm ≫ Sm6375 Version -
Qualcomm ≫ Sm7325 Firmware Version -
   Qualcomm ≫ Sm7325 Version -
Qualcomm ≫ Sm7325-ae Firmware Version -
   Qualcomm ≫ Sm7325-ae Version -
Qualcomm ≫ Sm7350-ab Firmware Version -
   Qualcomm ≫ Sm7350-ab Version -
Qualcomm ≫ Sm7325-af Firmware Version -
   Qualcomm ≫ Sm7325-af Version -
Qualcomm ≫ Sm8350 Firmware Version -
   Qualcomm ≫ Sm8350 Version -
Qualcomm ≫ Sm8350-ac Firmware Version -
   Qualcomm ≫ Sm8350-ac Version -
Qualcomm ≫ Wcd9335 Firmware Version -
   Qualcomm ≫ Wcd9335 Version -
Qualcomm ≫ Wcd9341 Firmware Version -
   Qualcomm ≫ Wcd9341 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9375 Firmware Version -
   Qualcomm ≫ Wcd9375 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcn3950 Firmware Version -
   Qualcomm ≫ Wcn3950 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wcn6740 Firmware Version -
   Qualcomm ≫ Wcn6740 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.015
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-195 Signed to Unsigned Conversion Error

The product uses a signed primitive and performs a cast to an unsigned primitive, which can produce an unexpected value if the value of the signed primitive can not be represented using an unsigned primitive.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin
Patch
Vendor Advisory