7.8

CVE-2023-33092

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Aqt1000 Firmware Version -
   Qualcomm ≫ Aqt1000 Version -
Qualcomm ≫ Fastconnect 6200 Firmware Version -
   Qualcomm ≫ Fastconnect 6200 Version -
Qualcomm ≫ Fastconnect 6700 Firmware Version -
   Qualcomm ≫ Fastconnect 6700 Version -
Qualcomm ≫ Fastconnect 6800 Firmware Version -
   Qualcomm ≫ Fastconnect 6800 Version -
Qualcomm ≫ Fastconnect 6900 Firmware Version -
   Qualcomm ≫ Fastconnect 6900 Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
   Qualcomm ≫ Fastconnect 7800 Version -
Qualcomm ≫ Qca6310 Firmware Version -
   Qualcomm ≫ Qca6310 Version -
Qualcomm ≫ Qca6320 Firmware Version -
   Qualcomm ≫ Qca6320 Version -
Qualcomm ≫ Qca6391 Firmware Version -
   Qualcomm ≫ Qca6391 Version -
Qualcomm ≫ Qca6420 Firmware Version -
   Qualcomm ≫ Qca6420 Version -
Qualcomm ≫ Qca6430 Firmware Version -
   Qualcomm ≫ Qca6430 Version -
Qualcomm ≫ Qcm4325 Firmware Version -
   Qualcomm ≫ Qcm4325 Version -
Qualcomm ≫ Qcm4490 Firmware Version -
   Qualcomm ≫ Qcm4490 Version -
Qualcomm ≫ Qcm5430 Firmware Version -
   Qualcomm ≫ Qcm5430 Version -
Qualcomm ≫ Qcm6490 Firmware Version -
   Qualcomm ≫ Qcm6490 Version -
Qualcomm ≫ Qcm8550 Firmware Version -
   Qualcomm ≫ Qcm8550 Version -
Qualcomm ≫ Qcs4490 Firmware Version -
   Qualcomm ≫ Qcs4490 Version -
Qualcomm ≫ Qcs5430 Firmware Version -
   Qualcomm ≫ Qcs5430 Version -
Qualcomm ≫ Qcs6490 Firmware Version -
   Qualcomm ≫ Qcs6490 Version -
Qualcomm ≫ Qcs7230 Firmware Version -
   Qualcomm ≫ Qcs7230 Version -
Qualcomm ≫ Qcs8250 Firmware Version -
   Qualcomm ≫ Qcs8250 Version -
Qualcomm ≫ Qcs8550 Firmware Version -
   Qualcomm ≫ Qcs8550 Version -
Qualcomm ≫ Sd730 Firmware Version -
   Qualcomm ≫ Sd730 Version -
Qualcomm ≫ Sd835 Firmware Version -
   Qualcomm ≫ Sd835 Version -
Qualcomm ≫ Sd855 Firmware Version -
   Qualcomm ≫ Sd855 Version -
Qualcomm ≫ Sd888 Firmware Version -
   Qualcomm ≫ Sd888 Version -
Qualcomm ≫ Sg4150p Firmware Version -
   Qualcomm ≫ Sg4150p Version -
Qualcomm ≫ Sm6250 Firmware Version -
   Qualcomm ≫ Sm6250 Version -
Qualcomm ≫ Sm7250p Firmware Version -
   Qualcomm ≫ Sm7250p Version -
Qualcomm ≫ Sm7315 Firmware Version -
   Qualcomm ≫ Sm7315 Version -
Qualcomm ≫ Sm7325p Firmware Version -
   Qualcomm ≫ Sm7325p Version -
Qualcomm ≫ Sm8550p Firmware Version -
   Qualcomm ≫ Sm8550p Version -
Qualcomm ≫ Wcd9326 Firmware Version -
   Qualcomm ≫ Wcd9326 Version -
Qualcomm ≫ Wcd9335 Firmware Version -
   Qualcomm ≫ Wcd9335 Version -
Qualcomm ≫ Wcd9340 Firmware Version -
   Qualcomm ≫ Wcd9340 Version -
Qualcomm ≫ Wcd9341 Firmware Version -
   Qualcomm ≫ Wcd9341 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9375 Firmware Version -
   Qualcomm ≫ Wcd9375 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcd9390 Firmware Version -
   Qualcomm ≫ Wcd9390 Version -
Qualcomm ≫ Wcd9395 Firmware Version -
   Qualcomm ≫ Wcd9395 Version -
Qualcomm ≫ Wcn3615 Firmware Version -
   Qualcomm ≫ Wcn3615 Version -
Qualcomm ≫ Wcn3660b Firmware Version -
   Qualcomm ≫ Wcn3660b Version -
Qualcomm ≫ Wcn3680b Firmware Version -
   Qualcomm ≫ Wcn3680b Version -
Qualcomm ≫ Wcn3950 Firmware Version -
   Qualcomm ≫ Wcn3950 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wcn3990 Firmware Version -
   Qualcomm ≫ Wcn3990 Version -
Qualcomm ≫ Wcn6740 Firmware Version -
   Qualcomm ≫ Wcn6740 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8832 Firmware Version -
   Qualcomm ≫ Wsa8832 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Qualcomm ≫ Wsa8840 Firmware Version -
   Qualcomm ≫ Wsa8840 Version -
Qualcomm ≫ Wsa8845 Firmware Version -
   Qualcomm ≫ Wsa8845 Version -
Qualcomm ≫ Wsa8845h Firmware Version -
   Qualcomm ≫ Wsa8845h Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
Patch
Vendor Advisory