5.5

CVE-2023-33060

Buffer Over-read in Core

Transient DOS in Core when DDR memory check is called while DDR is not initialized.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ar8035 Firmware Version -
   Qualcomm ≫ Ar8035 Version -
Qualcomm ≫ Fastconnect 6700 Firmware Version -
   Qualcomm ≫ Fastconnect 6700 Version -
Qualcomm ≫ Fastconnect 6900 Firmware Version -
   Qualcomm ≫ Fastconnect 6900 Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
   Qualcomm ≫ Fastconnect 7800 Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq Version -
Qualcomm ≫ Qca8081 Firmware Version -
   Qualcomm ≫ Qca8081 Version -
Qualcomm ≫ Qca8337 Firmware Version -
   Qualcomm ≫ Qca8337 Version -
Qualcomm ≫ Qcc710 Firmware Version -
   Qualcomm ≫ Qcc710 Version -
Qualcomm ≫ Qcm4490 Firmware Version -
   Qualcomm ≫ Qcm4490 Version -
Qualcomm ≫ Qcm8550 Firmware Version -
   Qualcomm ≫ Qcm8550 Version -
Qualcomm ≫ Qcn6024 Firmware Version -
   Qualcomm ≫ Qcn6024 Version -
Qualcomm ≫ Qcn6224 Firmware Version -
   Qualcomm ≫ Qcn6224 Version -
Qualcomm ≫ Qcn6274 Firmware Version -
   Qualcomm ≫ Qcn6274 Version -
Qualcomm ≫ Qcn9024 Firmware Version -
   Qualcomm ≫ Qcn9024 Version -
Qualcomm ≫ Qcs4490 Firmware Version -
   Qualcomm ≫ Qcs4490 Version -
Qualcomm ≫ Qcs8550 Firmware Version -
   Qualcomm ≫ Qcs8550 Version -
Qualcomm ≫ Qfw7114 Firmware Version -
   Qualcomm ≫ Qfw7114 Version -
Qualcomm ≫ Qfw7124 Firmware Version -
   Qualcomm ≫ Qfw7124 Version -
Qualcomm ≫ Sg8275p Firmware Version -
   Qualcomm ≫ Sg8275p Version -
Qualcomm ≫ Sm8550p Firmware Version -
   Qualcomm ≫ Sm8550p Version -
Qualcomm ≫ Wcd9340 Firmware Version -
   Qualcomm ≫ Wcd9340 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcd9390 Firmware Version -
   Qualcomm ≫ Wcd9390 Version -
Qualcomm ≫ Wcd9395 Firmware Version -
   Qualcomm ≫ Wcd9395 Version -
Qualcomm ≫ Wcn3950 Firmware Version -
   Qualcomm ≫ Wcn3950 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8832 Firmware Version -
   Qualcomm ≫ Wsa8832 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Qualcomm ≫ Wsa8840 Firmware Version -
   Qualcomm ≫ Wsa8840 Version -
Qualcomm ≫ Wsa8845 Firmware Version -
   Qualcomm ≫ Wsa8845 Version -
Qualcomm ≫ Wsa8845h Firmware Version -
   Qualcomm ≫ Wsa8845h Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.011
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Qualcomm 7.1 2.5 4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin
Vendor Advisory