Action not permitted
Modal body text goes here.
Modal Title
Modal Body
wid-sec-w-2023-1981
Vulnerability from csaf_certbund
Published
2023-08-07 22:00
Modified
2023-08-07 22:00
Summary
Samsung Android: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erhöhen.
Betroffene Betriebssysteme
- Android
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erhöhen.", title: "Angriff", }, { category: "general", text: "- Android", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-1981 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1981.json", }, { category: "self", summary: "WID-SEC-2023-1981 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1981", }, { category: "external", summary: "Samsung Security Advisory - SMR-AUG-2023 vom 2023-08-07", url: "https://security.samsungmobile.com/securityUpdate.smsb", }, ], source_lang: "en-US", title: "Samsung Android: Mehrere Schwachstellen", tracking: { current_release_date: "2023-08-07T22:00:00.000+00:00", generator: { date: "2024-08-15T17:56:39.395+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-1981", initial_release_date: "2023-08-07T22:00:00.000+00:00", revision_history: [ { date: "2023-08-07T22:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Samsung Android <= 13", product: { name: "Samsung Android <= 13", product_id: "T029119", product_identification_helper: { cpe: "cpe:/o:samsung:android:13", }, }, }, ], category: "vendor", name: "Samsung", }, ], }, vulnerabilities: [ { cve: "CVE-2023-30689", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30689", }, { cve: "CVE-2023-30688", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30688", }, { cve: "CVE-2023-30687", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30687", }, { cve: "CVE-2023-30686", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30686", }, { cve: "CVE-2023-30685", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30685", }, { cve: "CVE-2023-30684", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30684", }, { cve: "CVE-2023-30683", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30683", }, { cve: "CVE-2023-30682", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30682", }, { cve: "CVE-2023-30681", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30681", }, { cve: "CVE-2023-30680", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30680", }, { cve: "CVE-2023-30679", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30679", }, { cve: "CVE-2023-30654", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30654", }, { cve: "CVE-2023-28542", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-28542", }, { cve: "CVE-2023-28541", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-28541", }, { cve: "CVE-2023-28147", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-28147", }, { cve: "CVE-2023-26083", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-26083", }, { cve: "CVE-2023-25012", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-25012", }, { cve: "CVE-2023-24854", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-24854", }, { cve: "CVE-2023-24851", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-24851", }, { cve: "CVE-2023-22667", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-22667", }, { cve: "CVE-2023-22387", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-22387", }, { cve: "CVE-2023-22386", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-22386", }, { cve: "CVE-2023-21672", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21672", }, { cve: "CVE-2023-21631", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21631", }, { cve: "CVE-2023-21629", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21629", }, { cve: "CVE-2023-21292", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21292", }, { cve: "CVE-2023-21290", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21290", }, { cve: "CVE-2023-21289", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21289", }, { cve: "CVE-2023-21288", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21288", }, { cve: "CVE-2023-21287", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21287", }, { cve: "CVE-2023-21286", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21286", }, { cve: "CVE-2023-21285", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21285", }, { cve: "CVE-2023-21284", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21284", }, { cve: "CVE-2023-21283", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21283", }, { cve: "CVE-2023-21282", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21282", }, { cve: "CVE-2023-21281", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21281", }, { cve: "CVE-2023-21280", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21280", }, { cve: "CVE-2023-21279", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21279", }, { cve: "CVE-2023-21278", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21278", }, { cve: "CVE-2023-21277", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21277", }, { cve: "CVE-2023-21276", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21276", }, { cve: "CVE-2023-21275", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21275", }, { cve: "CVE-2023-21274", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21274", }, { cve: "CVE-2023-21273", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21273", }, { cve: "CVE-2023-21272", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21272", }, { cve: "CVE-2023-21271", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21271", }, { cve: "CVE-2023-21270", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21270", }, { cve: "CVE-2023-21269", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21269", }, { cve: "CVE-2023-21268", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21268", }, { cve: "CVE-2023-21267", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21267", }, { cve: "CVE-2023-21265", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21265", }, { cve: "CVE-2023-21255", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21255", }, { cve: "CVE-2023-21242", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21242", }, { cve: "CVE-2023-21235", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21235", }, { cve: "CVE-2023-21234", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21234", }, { cve: "CVE-2023-21233", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21233", }, { cve: "CVE-2023-21232", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21232", }, { cve: "CVE-2023-21231", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21231", }, { cve: "CVE-2023-21230", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21230", }, { cve: "CVE-2023-21229", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21229", }, { cve: "CVE-2023-21140", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21140", }, { cve: "CVE-2023-21134", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21134", }, { cve: "CVE-2023-21133", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21133", }, { cve: "CVE-2023-21132", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-21132", }, { cve: "CVE-2023-20965", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-20965", }, { cve: "CVE-2023-20755", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-20755", }, { cve: "CVE-2023-20754", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-20754", }, { cve: "CVE-2022-42703", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2022-42703", }, { cve: "CVE-2022-28350", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2022-28350", }, { cve: "CVE-2021-29256", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2021-29256", }, { cve: "CVE-2021-0948", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2021-0948", }, { cve: "CVE-2023-35689", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-35689", }, { cve: "CVE-2023-30701", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30701", }, { cve: "CVE-2023-30700", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30700", }, { cve: "CVE-2023-30699", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30699", }, { cve: "CVE-2023-30698", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30698", }, { cve: "CVE-2023-30697", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30697", }, { cve: "CVE-2023-30696", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30696", }, { cve: "CVE-2023-30694", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30694", }, { cve: "CVE-2023-30693", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30693", }, { cve: "CVE-2023-30691", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler existieren in den Komponenten WifiGeofenceManager, SemWifiApTimeOutImpl, libsimba, TelephonyUI, libsec-ril, AuthenticationConfig, Telecom, SLocationService, VaultKeeper in HAL, MMIGroup, HDCP trustlet. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern oder Dateien zu manipulieren. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.", }, ], product_status: { last_affected: [ "T029119", ], }, release_date: "2023-08-07T22:00:00.000+00:00", title: "CVE-2023-30691", }, ], }
cve-2023-21275
Vulnerability from cvelistv5
Published
2023-08-14 21:01
Modified
2024-10-09 14:59
Severity ?
EPSS score ?
Summary
In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.126Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8277a2a946e617a7ea65056e4cedeb1fecf3a5f5", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21275", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:58:46.346600Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:59:48.795Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:01:55.530Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8277a2a946e617a7ea65056e4cedeb1fecf3a5f5", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21275", datePublished: "2023-08-14T21:01:55.530Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:59:48.795Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21267
Vulnerability from cvelistv5
Published
2023-08-14 20:59
Modified
2024-08-02 09:28
Severity ?
EPSS score ?
Summary
In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2023-21267", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-05-15T14:54:32.382055Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-200", description: "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-06-04T17:19:45.063Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.209Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/cecddcd865f72d76f7aacb1cf4479365847299f9", }, { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/cb7e9c7549a2a076ec00db15e3da0d21b31b0b1c", }, { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/e205cd30e91d8eeadf562140c34c306ebf7d6394", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2024-04-01", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "14", }, { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", value: "In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2024-05-07T21:01:28.673Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/cecddcd865f72d76f7aacb1cf4479365847299f9", }, { url: "https://android.googlesource.com/platform/frameworks/base/+/cb7e9c7549a2a076ec00db15e3da0d21b31b0b1c", }, { url: "https://android.googlesource.com/platform/frameworks/base/+/e205cd30e91d8eeadf562140c34c306ebf7d6394", }, { url: "https://source.android.com/security/bulletin/2024-04-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21267", datePublished: "2023-08-14T20:59:41.378Z", dateReserved: "2022-11-03T22:37:50.653Z", dateUpdated: "2024-08-02T09:28:26.209Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30693
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 15:58
Severity ?
EPSS score ?
Summary
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.109Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung_mobile", versions: [ { status: "affected", version: "SMR_Aug_2023_Release_1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30693", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T15:56:00.763172Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T15:58:31.249Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:37.085Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30693", datePublished: "2023-08-10T01:18:37.085Z", dateReserved: "2023-04-14T01:59:51.126Z", dateUpdated: "2024-10-10T15:58:31.249Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-26083
Vulnerability from cvelistv5
Published
2023-04-06 00:00
Modified
2025-02-03 14:19
Severity ?
EPSS score ?
Summary
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T11:39:06.625Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, { tags: [ "x_transferred", ], url: "https://www.cybersecurity-help.cz/vdb/SB2023033049", }, { tags: [ "x_transferred", ], url: "https://www.cybersecurity-help.cz/vulnerabilities/74210/", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 3.3, baseSeverity: "LOW", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, }, { other: { content: { id: "CVE-2023-26083", options: [ { Exploitation: "active", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-01-19T17:57:15.442432Z", version: "2.0.3", }, type: "ssvc", }, }, { other: { content: { dateAdded: "2023-04-07", reference: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26083", }, type: "kev", }, }, ], providerMetadata: { dateUpdated: "2025-02-03T14:19:37.820Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-04-06T00:00:00.000Z", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, { url: "https://www.cybersecurity-help.cz/vdb/SB2023033049", }, { url: "https://www.cybersecurity-help.cz/vulnerabilities/74210/", }, ], }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2023-26083", datePublished: "2023-04-06T00:00:00.000Z", dateReserved: "2023-02-20T00:00:00.000Z", dateUpdated: "2025-02-03T14:19:37.820Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2021-0948
Vulnerability from cvelistv5
Published
2023-07-12 23:16
Modified
2024-11-06 17:27
Severity ?
EPSS score ?
Summary
The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T15:55:18.087Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-07-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2021-0948", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-11-06T17:27:29.862581Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-11-06T17:27:37.540Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "Android SoC", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.</p>", }, ], value: "The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-07-12T23:16:21.465Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/2023-07-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2021-0948", datePublished: "2023-07-12T23:16:21.465Z", dateReserved: "2020-11-06T00:00:00.000Z", dateUpdated: "2024-11-06T17:27:37.540Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30696
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 14:16
Severity ?
EPSS score ?
Summary
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.142Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30696", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T14:16:24.267835Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T14:16:35.080Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.4, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-122 Heap-based Buffer Overflow", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:41.177Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30696", datePublished: "2023-08-10T01:18:41.177Z", dateReserved: "2023-04-14T01:59:51.127Z", dateUpdated: "2024-10-04T14:16:35.080Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21292
Vulnerability from cvelistv5
Published
2023-08-14 21:08
Modified
2024-10-09 14:33
Severity ?
EPSS score ?
Summary
In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.999Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/d10b27e539f7bc91c2360d429b9d05f05274670d", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21292", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:33:20.907331Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:33:32.167Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:08:54.963Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/d10b27e539f7bc91c2360d429b9d05f05274670d", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21292", datePublished: "2023-08-14T21:08:38.615Z", dateReserved: "2022-11-03T22:37:50.656Z", dateUpdated: "2024-10-09T14:33:32.167Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21283
Vulnerability from cvelistv5
Published
2023-08-14 21:05
Modified
2024-10-09 14:45
Severity ?
EPSS score ?
Summary
In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:33.009Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/services/Telecomm/+/9b41a963f352fdb3da1da8c633d45280badfcb24", }, { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/e17fd149c0a2bf6cce56ebfae3fa5364fead22cc", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21283", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:45:44.723417Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:45:55.818Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.</p>", }, ], value: "In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:05:55.410Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/services/Telecomm/+/9b41a963f352fdb3da1da8c633d45280badfcb24", }, { url: "https://android.googlesource.com/platform/frameworks/base/+/e17fd149c0a2bf6cce56ebfae3fa5364fead22cc", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21283", datePublished: "2023-08-14T21:05:55.410Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:45:55.818Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21288
Vulnerability from cvelistv5
Published
2023-08-14 21:07
Modified
2024-10-09 14:36
Severity ?
EPSS score ?
Summary
In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:33.241Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/726247f4f53e8cc0746175265652fa415a123c0c", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21288", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:36:03.478195Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:36:22.457Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:07:10.453Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/726247f4f53e8cc0746175265652fa415a123c0c", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21288", datePublished: "2023-08-14T21:07:10.453Z", dateReserved: "2022-11-03T22:37:50.656Z", dateUpdated: "2024-10-09T14:36:22.457Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30685
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 15:05
Severity ?
EPSS score ?
Summary
Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.014Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30685", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T15:05:13.306917Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T15:05:24.641Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284 Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:29.516Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30685", datePublished: "2023-08-10T01:18:29.516Z", dateReserved: "2023-04-14T01:59:51.123Z", dateUpdated: "2024-10-04T15:05:24.641Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21629
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 09:44
Severity ?
EPSS score ?
Summary
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: 315 5G IoT Modem Version: APQ8017 Version: APQ8037 Version: AQT1000 Version: AR8035 Version: C-V2X 9150 Version: CSRA6620 Version: CSRA6640 Version: CSRB31024 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: MDM9250 Version: MDM9650 Version: MSM8108 Version: MSM8209 Version: MSM8608 Version: MSM8909W Version: QCA6174A Version: QCA6310 Version: QCA6320 Version: QCA6335 Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6564A Version: QCA6564AU Version: QCA6574A Version: QCA6574AU Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA8081 Version: QCA8337 Version: QCA9377 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM6125 Version: QCM6490 Version: QCN6024 Version: QCN9024 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS4490 Version: QCS610 Version: QCS6125 Version: QCS6490 Version: QCS8550 Version: Qualcomm 205 Mobile Platform Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Robotics RB3 Platform Version: SA6145P Version: SA6150P Version: SA6155 Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155 Version: SA8155P Version: SA8195P Version: SC8180X+SDX55 Version: SD 455 Version: SD 675 Version: SD460 Version: SD626 Version: SD660 Version: SD662 Version: SD670 Version: SD675 Version: SD730 Version: SD835 Version: SD855 Version: SD865 5G Version: SD888 Version: SDX55 Version: SDX57M Version: SG4150P Version: SM6250 Version: SM6250P Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 200 Platform Version: Smart Audio 400 Platform Version: Smart Display 200 Platform (APQ5053-AA) Version: Snapdragon 208 Processor Version: Snapdragon 210 Processor Version: Snapdragon 212 Mobile Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 425 Mobile Platform Version: Snapdragon 427 Mobile Platform Version: Snapdragon 429 Mobile Platform Version: Snapdragon 430 Mobile Platform Version: Snapdragon 435 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 450 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 625 Mobile Platform Version: Snapdragon 626 Mobile Platform Version: Snapdragon 630 Mobile Platform Version: Snapdragon 632 Mobile Platform Version: Snapdragon 636 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 670 Mobile Platform Version: Snapdragon 675 Mobile Platform Version: Snapdragon 678 Mobile Platform (SM6150-AC) Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 710 Mobile Platform Version: Snapdragon 712 Mobile Platform Version: Snapdragon 720G Mobile Platform Version: Snapdragon 730 Mobile Platform (SM7150-AA) Version: Snapdragon 730G Mobile Platform (SM7150-AB) Version: Snapdragon 732G Mobile Platform (SM7150-AC) Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c Compute Platform (SC7180-AC) Version: Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro" Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 845 Mobile Platform Version: Snapdragon 850 Mobile Compute Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite" Version: Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" Version: Snapdragon 8cx Compute Platform (SC8180X-AA, AB) Version: Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro" Version: Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro" Version: Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB) Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon Wear 2100 Platform Version: Snapdragon Wear 2500 Platform Version: Snapdragon Wear 3100 Platform Version: Snapdragon X12 LTE Modem Version: Snapdragon X20 LTE Modem Version: Snapdragon X24 LTE Modem Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon X70 Modem-RF System Version: Snapdragon XR1 Platform Version: Snapdragon XR2 5G Platform Version: Snapdragon Auto 4G Modem Version: SW5100 Version: SW5100P Version: SXR1120 Version: SXR2130 Version: Vision Intelligence 100 Platform (APQ8053-AA) Version: Vision Intelligence 200 Platform (APQ8053-AC) Version: Vision Intelligence 300 Platform Version: Vision Intelligence 400 Platform Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9360 Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3610 Version: WCN3615 Version: WCN3620 Version: WCN3660 Version: WCN3660B Version: WCN3680 Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:qualcomm:315_5g_iot_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "315_5g_iot_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "apq8017_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:apq8037_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "apq8037_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "aqt1000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ar8035_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "c-v2x_9150_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6620_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6640_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csrb31024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6200_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6700_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6900_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_7800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9650_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:msm8108_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "msm8108_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:msm8209_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "msm8209_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:msm8608_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "msm8608_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "msm8909w_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6174a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6310_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6320_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6391_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6420_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6421_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6426_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6430_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6431_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6436_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6696_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6698aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8081_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8337_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9377_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm2290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4325_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4325_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs2290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs410_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs4290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs4490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs610_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs8550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_205_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_205_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_215_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_215_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:robotics_rb3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "robotics_rb3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6155_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8155_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8195p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd_455_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd_455_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd_675_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd460_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd626_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd660_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd662_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd670_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd675_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd730_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd855_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd865_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd888_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx55_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx57m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx57m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sg4150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sg4150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm6250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm6250p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7250p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7315_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7325p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:smart_audio_200_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "smart_audio_200_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "smart_audio_400_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_208_processor_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_208_processor_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_210_processor_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_210_processor_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_212_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_212_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_4_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_4_gen_2_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_425_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_425_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_427_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_427_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_429_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_430_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_430_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_435_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_435_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_439_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_439_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_450_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_450_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_460_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_480_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_625_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_625_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_626_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_626_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_630_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_630_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_632_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_632_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_636_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_636_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_660_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_660_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_662_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_665_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_665_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_670_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_670_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_675_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_675_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_680_4g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_690_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_690_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_695_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_710_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_710_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_712_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_712_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_720g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_720g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_750g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_750g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_778g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_780g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_8_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_835_mobile_pc_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_835_mobile_pc_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_845_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_845_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_850_mobile_compute_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_850_mobile_compute_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_855_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_855_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_865_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_888_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_5g_modem-rf_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_wear_2100_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_wear_2100_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_wear_2500_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_wear_2500_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_wear_3100_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_wear_3100_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x12_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x20_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x20_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x24_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x24_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x50_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x50_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x55_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x65_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x70_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_xr1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_xr1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_xr2_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_4g_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr1120_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr1120_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2130_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:vision_intelligence_300_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "vision_intelligence_300_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:vision_intelligence_400_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "vision_intelligence_400_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9326_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9340_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9341_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9360_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9370_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9371_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9375_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9385_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3610_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3615_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3620_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3660_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3660_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3660b_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3680_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3680b_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3910_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3950_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3980_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3988_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3990_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6740_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8810_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8815_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8830_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8832_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21629", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-07-11T20:10:33.324550Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-11T20:10:48.360Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-02T09:44:01.621Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "315 5G IoT Modem", }, { status: "affected", version: "APQ8017", }, { status: "affected", version: "APQ8037", }, { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8035", }, { status: "affected", version: "C-V2X 9150", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "MDM9250", }, { status: "affected", version: "MDM9650", }, { status: "affected", version: "MSM8108", }, { status: "affected", version: "MSM8209", }, { status: "affected", version: "MSM8608", }, { status: "affected", version: "MSM8909W", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6335", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6564A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "QCM4490", }, { status: "affected", version: "QCM6125", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS4490", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6125", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8550", }, { status: "affected", version: "Qualcomm 205 Mobile Platform", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Robotics RB3 Platform", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SC8180X+SDX55", }, { status: "affected", version: "SD 455", }, { status: "affected", version: "SD 675", }, { status: "affected", version: "SD460", }, { status: "affected", version: "SD626", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD662", }, { status: "affected", version: "SD670", }, { status: "affected", version: "SD675", }, { status: "affected", version: "SD730", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SDX57M", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "SM6250", }, { status: "affected", version: "SM6250P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 200 Platform", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Smart Display 200 Platform (APQ5053-AA)", }, { status: "affected", version: "Snapdragon 208 Processor", }, { status: "affected", version: "Snapdragon 210 Processor", }, { status: "affected", version: "Snapdragon 212 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 425 Mobile Platform", }, { status: "affected", version: "Snapdragon 427 Mobile Platform", }, { status: "affected", version: "Snapdragon 429 Mobile Platform", }, { status: "affected", version: "Snapdragon 430 Mobile Platform", }, { status: "affected", version: "Snapdragon 435 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 450 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 625 Mobile Platform", }, { status: "affected", version: "Snapdragon 626 Mobile Platform", }, { status: "affected", version: "Snapdragon 630 Mobile Platform", }, { status: "affected", version: "Snapdragon 632 Mobile Platform", }, { status: "affected", version: "Snapdragon 636 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 670 Mobile Platform", }, { status: "affected", version: "Snapdragon 675 Mobile Platform", }, { status: "affected", version: "Snapdragon 678 Mobile Platform (SM6150-AC)", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 710 Mobile Platform", }, { status: "affected", version: "Snapdragon 712 Mobile Platform", }, { status: "affected", version: "Snapdragon 720G Mobile Platform", }, { status: "affected", version: "Snapdragon 730 Mobile Platform (SM7150-AA)", }, { status: "affected", version: "Snapdragon 730G Mobile Platform (SM7150-AB)", }, { status: "affected", version: "Snapdragon 732G Mobile Platform (SM7150-AC)", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c Compute Platform (SC7180-AC)", }, { status: "affected", version: "Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) \"Rennell Pro\"", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 845 Mobile Platform", }, { status: "affected", version: "Snapdragon 850 Mobile Compute Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon 8c Compute Platform (SC8180X-AD) \"Poipu Lite\"", }, { status: "affected", version: "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\"", }, { status: "affected", version: "Snapdragon 8cx Compute Platform (SC8180X-AA, AB)", }, { status: "affected", version: "Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) \"Poipu Pro\"", }, { status: "affected", version: "Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) \"Poipu Pro\"", }, { status: "affected", version: "Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon Wear 2100 Platform", }, { status: "affected", version: "Snapdragon Wear 2500 Platform", }, { status: "affected", version: "Snapdragon Wear 3100 Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X20 LTE Modem", }, { status: "affected", version: "Snapdragon X24 LTE Modem", }, { status: "affected", version: "Snapdragon X50 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X70 Modem-RF System", }, { status: "affected", version: "Snapdragon XR1 Platform", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1120", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "Vision Intelligence 100 Platform (APQ8053-AA)", }, { status: "affected", version: "Vision Intelligence 200 Platform (APQ8053-AC)", }, { status: "affected", version: "Vision Intelligence 300 Platform", }, { status: "affected", version: "Vision Intelligence 400 Platform", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3610", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3620", }, { status: "affected", version: "WCN3660", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "PHYSICAL", availabilityImpact: "HIGH", baseScore: 6.8, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-415", description: "CWE-415 Double Free", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:24:28.222Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Double Free in Modem", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-21629", datePublished: "2023-07-04T04:46:29.370Z", dateReserved: "2022-12-07T02:58:25.864Z", dateUpdated: "2024-08-02T09:44:01.621Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21231
Vulnerability from cvelistv5
Published
2023-08-14 21:10
Modified
2024-10-09 14:11
Severity ?
EPSS score ?
Summary
In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.278Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21231", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:11:35.107690Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:11:46.447Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:10:42.420Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21231", datePublished: "2023-08-14T21:10:42.420Z", dateReserved: "2022-11-03T22:37:50.649Z", dateUpdated: "2024-10-09T14:11:46.447Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21280
Vulnerability from cvelistv5
Published
2023-08-14 21:04
Modified
2024-10-09 14:51
Severity ?
EPSS score ?
Summary
In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.944Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/06e772e05514af4aa427641784c5eec39a892ed3", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21280", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:50:52.065140Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:51:09.796Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Denial of service", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:04:48.201Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/06e772e05514af4aa427641784c5eec39a892ed3", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21280", datePublished: "2023-08-14T21:04:48.201Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:51:09.796Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21268
Vulnerability from cvelistv5
Published
2023-08-14 20:59
Modified
2024-10-09 18:58
Severity ?
EPSS score ?
Summary
In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.120Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21268", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T18:58:37.001439Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T18:58:49.964Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Denial of service", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:59:52.485Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21268", datePublished: "2023-08-14T20:59:52.485Z", dateReserved: "2022-11-03T22:37:50.654Z", dateUpdated: "2024-10-09T18:58:49.964Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30694
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 15:55
Severity ?
EPSS score ?
Summary
Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.096Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30694", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T15:54:42.711270Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T15:55:00.296Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:38.315Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30694", datePublished: "2023-08-10T01:18:38.315Z", dateReserved: "2023-04-14T01:59:51.126Z", dateUpdated: "2024-10-10T15:55:00.296Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21235
Vulnerability from cvelistv5
Published
2023-08-14 21:09
Modified
2024-10-09 14:20
Severity ?
EPSS score ?
Summary
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.116Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/docs/security/bulletin/wear/2023/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21235", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:19:37.048851Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:20:00.254Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-10-04T20:08:00.577Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/docs/security/bulletin/wear/2023/2023-08-01", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.1.0-dev", }, }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21235", datePublished: "2023-08-14T21:09:50.973Z", dateReserved: "2022-11-03T22:37:50.649Z", dateUpdated: "2024-10-09T14:20:00.254Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-24854
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 11:03
Severity ?
EPSS score ?
Summary
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: AR8035 Version: CSRA6620 Version: CSRA6640 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: Flight RB5 5G Platform Version: Immersive Home 214 Platform Version: Immersive Home 216 Platform Version: Immersive Home 316 Platform Version: Immersive Home 318 Platform Version: IPQ5010 Version: IPQ6018 Version: IPQ8074A Version: IPQ8174 Version: IPQ9574 Version: QAM8255P Version: QAM8295P Version: QAM8650P Version: QAM8775P Version: QCA4024 Version: QCA6174A Version: QCA6310 Version: QCA6320 Version: QCA6391 Version: QCA6554A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6584AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA8072 Version: QCA8075 Version: QCA8081 Version: QCA8337 Version: QCA9377 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM6490 Version: QCN5022 Version: QCN5024 Version: QCN5052 Version: QCN5054 Version: QCN5122 Version: QCN5152 Version: QCN6024 Version: QCN9000 Version: QCN9001 Version: QCN9002 Version: QCN9003 Version: QCN9011 Version: QCN9012 Version: QCN9024 Version: QCN9274 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS4490 Version: QCS610 Version: QCS6490 Version: QRB5165M Version: QRB5165N Version: QSM8350 Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 8 Gen1 5G Version: SD660 Version: SD835 Version: SD865 5G Version: SD888 Version: SG4150P Version: SM4125 Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 400 Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon AR2 Gen 1 Platform Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon X12 LTE Modem Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: SSG2115P Version: SSG2125P Version: SW5100 Version: SW5100P Version: SXR1230P Version: SXR2230P Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3615 Version: WCN3660B Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T11:03:19.284Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "AR8035", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Immersive Home 214 Platform", }, { status: "affected", version: "Immersive Home 216 Platform", }, { status: "affected", version: "Immersive Home 316 Platform", }, { status: "affected", version: "Immersive Home 318 Platform", }, { status: "affected", version: "IPQ5010", }, { status: "affected", version: "IPQ6018", }, { status: "affected", version: "IPQ8074A", }, { status: "affected", version: "IPQ8174", }, { status: "affected", version: "IPQ9574", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QAM8650P", }, { status: "affected", version: "QAM8775P", }, { status: "affected", version: "QCA4024", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6554A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA8072", }, { status: "affected", version: "QCA8075", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "QCM4490", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN5022", }, { status: "affected", version: "QCN5024", }, { status: "affected", version: "QCN5052", }, { status: "affected", version: "QCN5054", }, { status: "affected", version: "QCN5122", }, { status: "affected", version: "QCN5152", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN9000", }, { status: "affected", version: "QCN9001", }, { status: "affected", version: "QCN9002", }, { status: "affected", version: "QCN9003", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCN9274", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS4490", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "QSM8350", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "SM4125", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "SSG2115P", }, { status: "affected", version: "SSG2125P", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1230P", }, { status: "affected", version: "SXR2230P", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-121", description: "CWE-121 Stack-based Buffer Overflow", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:17.517Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Stack-based Buffer Overflow in WLAN HOST", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-24854", datePublished: "2023-07-04T04:46:43.332Z", dateReserved: "2023-01-31T16:25:23.370Z", dateUpdated: "2024-08-02T11:03:19.284Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21234
Vulnerability from cvelistv5
Published
2023-08-14 21:10
Modified
2024-10-09 14:19
Severity ?
EPSS score ?
Summary
In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.185Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21234", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:19:09.380264Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:19:17.765Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:10:03.606Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21234", datePublished: "2023-08-14T21:10:03.606Z", dateReserved: "2022-11-03T22:37:50.649Z", dateUpdated: "2024-10-09T14:19:17.765Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21134
Vulnerability from cvelistv5
Published
2023-08-14 20:58
Modified
2024-10-09 19:11
Severity ?
EPSS score ?
Summary
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.021Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "PHYSICAL", availabilityImpact: "HIGH", baseScore: 6.8, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-21134", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:01:52.546193Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-862", description: "CWE-862 Missing Authorization", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T19:11:41.385Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:58:11.888Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21134", datePublished: "2023-08-14T20:58:11.888Z", dateReserved: "2022-11-03T22:37:50.639Z", dateUpdated: "2024-10-09T19:11:41.385Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21631
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-12-05 16:58
Severity ?
EPSS score ?
Summary
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: 315 5G IoT Modem Version: 9205 LTE Modem Version: APQ8017 Version: APQ8037 Version: AQT1000 Version: AR8035 Version: C-V2X 9150 Version: CSRA6620 Version: CSRA6640 Version: CSRB31024 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: MDM9628 Version: MSM8108 Version: MSM8209 Version: MSM8608 Version: MSM8909W Version: QCA4004 Version: QCA6174A Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6564A Version: QCA6564AU Version: QCA6574A Version: QCA6574AU Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA8081 Version: QCA8337 Version: QCA9377 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM6490 Version: QCN6024 Version: QCN9024 Version: QCS2290 Version: QCS4290 Version: QCS4490 Version: QCS6490 Version: QCS8550 Version: QTS110 Version: Qualcomm 205 Mobile Platform Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC3 Platform Version: SC8180X+SDX55 Version: SD 455 Version: SD660 Version: SD855 Version: SD865 5G Version: SD888 Version: SDX55 Version: SDX57M Version: SG4150P Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 200 Platform Version: Smart Audio 400 Platform Version: Snapdragon 208 Processor Version: Snapdragon 210 Processor Version: Snapdragon 212 Mobile Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 425 Mobile Platform Version: Snapdragon 429 Mobile Platform Version: Snapdragon 430 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 630 Mobile Platform Version: Snapdragon 636 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite" Version: Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" Version: Snapdragon 8cx Compute Platform (SC8180X-AA, AB) Version: Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro" Version: Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro" Version: Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB) Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon Wear 1300 Platform Version: Snapdragon Wear 2100 Platform Version: Snapdragon Wear 2500 Platform Version: Snapdragon Wear 3100 Platform Version: Snapdragon X24 LTE Modem Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon X70 Modem-RF System Version: Snapdragon XR2 5G Platform Version: Snapdragon Auto 4G Modem Version: SW5100 Version: SW5100P Version: SXR2130 Version: WCD9306 Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9360 Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3610 Version: WCN3615 Version: WCN3620 Version: WCN3660B Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:44:02.140Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21631", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-12-05T16:57:35.858099Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-12-05T16:58:47.340Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "315 5G IoT Modem", }, { status: "affected", version: "9205 LTE Modem", }, { status: "affected", version: "APQ8017", }, { status: "affected", version: "APQ8037", }, { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8035", }, { status: "affected", version: "C-V2X 9150", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "MDM9628", }, { status: "affected", version: "MSM8108", }, { status: "affected", version: "MSM8209", }, { status: "affected", version: "MSM8608", }, { status: "affected", version: "MSM8909W", }, { status: "affected", version: "QCA4004", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6564A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "QCM4490", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS4490", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8550", }, { status: "affected", version: "QTS110", }, { status: "affected", version: "Qualcomm 205 Mobile Platform", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "SC8180X+SDX55", }, { status: "affected", version: "SD 455", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SDX57M", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 200 Platform", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Snapdragon 208 Processor", }, { status: "affected", version: "Snapdragon 210 Processor", }, { status: "affected", version: "Snapdragon 212 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 425 Mobile Platform", }, { status: "affected", version: "Snapdragon 429 Mobile Platform", }, { status: "affected", version: "Snapdragon 430 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 630 Mobile Platform", }, { status: "affected", version: "Snapdragon 636 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon 8c Compute Platform (SC8180X-AD) \"Poipu Lite\"", }, { status: "affected", version: "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\"", }, { status: "affected", version: "Snapdragon 8cx Compute Platform (SC8180X-AA, AB)", }, { status: "affected", version: "Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) \"Poipu Pro\"", }, { status: "affected", version: "Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) \"Poipu Pro\"", }, { status: "affected", version: "Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon Wear 1300 Platform", }, { status: "affected", version: "Snapdragon Wear 2100 Platform", }, { status: "affected", version: "Snapdragon Wear 2500 Platform", }, { status: "affected", version: "Snapdragon Wear 3100 Platform", }, { status: "affected", version: "Snapdragon X24 LTE Modem", }, { status: "affected", version: "Snapdragon X50 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X70 Modem-RF System", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "WCD9306", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3610", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3620", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-20", description: "CWE-20 Improper Input Validation", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:24:31.849Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Improper Input Validation in Modem", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-21631", datePublished: "2023-07-04T04:46:30.354Z", dateReserved: "2022-12-07T02:58:25.864Z", dateUpdated: "2024-12-05T16:58:47.340Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21132
Vulnerability from cvelistv5
Published
2023-08-14 20:57
Modified
2024-10-09 19:13
Severity ?
EPSS score ?
Summary
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.048Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "PHYSICAL", availabilityImpact: "HIGH", baseScore: 6.8, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-21132", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:01:54.508616Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-862", description: "CWE-862 Missing Authorization", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T19:13:01.708Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:57:31.732Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21132", datePublished: "2023-08-14T20:57:31.732Z", dateReserved: "2022-11-03T22:37:50.639Z", dateUpdated: "2024-10-09T19:13:01.708Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30691
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 16:02
Severity ?
EPSS score ?
Summary
Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.009Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung", versions: [ { status: "affected", version: "SMR_Aug_2023_Release_1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30691", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T15:59:42.775170Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-266", description: "CWE-266 Incorrect Privilege Assignment", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-10T16:02:44.510Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-20 Improper Input Validation ", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:35.883Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30691", datePublished: "2023-08-10T01:18:35.883Z", dateReserved: "2023-04-14T01:59:51.125Z", dateUpdated: "2024-10-10T16:02:44.510Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-28541
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 13:43
Severity ?
EPSS score ?
Summary
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: AQT1000 Version: AR8031 Version: AR9380 Version: C-V2X 9150 Version: CSR8811 Version: CSRA6620 Version: CSRA6640 Version: CSRB31024 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: Flight RB5 5G Platform Version: Immersive Home 214 Platform Version: Immersive Home 216 Platform Version: Immersive Home 316 Platform Version: Immersive Home 318 Platform Version: IPQ4018 Version: IPQ4019 Version: IPQ4028 Version: IPQ4029 Version: IPQ5010 Version: IPQ5028 Version: IPQ6000 Version: IPQ6010 Version: IPQ6018 Version: IPQ6028 Version: IPQ8064 Version: IPQ8065 Version: IPQ8068 Version: IPQ8070 Version: IPQ8070A Version: IPQ8071A Version: IPQ8072A Version: IPQ8074A Version: IPQ8076 Version: IPQ8076A Version: IPQ8078 Version: IPQ8078A Version: IPQ8173 Version: IPQ8174 Version: IPQ9008 Version: IPQ9574 Version: MDM9250 Version: MDM9628 Version: MDM9640 Version: MDM9650 Version: MSM8909W Version: QAM8255P Version: QAM8295P Version: QCA4024 Version: QCA6174A Version: QCA6175A Version: QCA6310 Version: QCA6320 Version: QCA6335 Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6554A Version: QCA6564A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6584AU Version: QCA6595 Version: QCA6595AU Version: QCA6678AQ Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA7500 Version: QCA8072 Version: QCA8075 Version: QCA8081 Version: QCA8082 Version: QCA8084 Version: QCA8085 Version: QCA8337 Version: QCA8386 Version: QCA9377 Version: QCA9880 Version: QCA9886 Version: QCA9888 Version: QCA9889 Version: QCA9898 Version: QCA9980 Version: QCA9984 Version: QCA9985 Version: QCA9990 Version: QCA9992 Version: QCA9994 Version: QCM6125 Version: QCM6490 Version: QCN5022 Version: QCN5024 Version: QCN5052 Version: QCN5054 Version: QCN5122 Version: QCN5124 Version: QCN5152 Version: QCN5154 Version: QCN5164 Version: QCN6023 Version: QCN6024 Version: QCN6122 Version: QCN6132 Version: QCN7605 Version: QCN7606 Version: QCN9000 Version: QCN9001 Version: QCN9002 Version: QCN9003 Version: QCN9011 Version: QCN9012 Version: QCN9022 Version: QCN9024 Version: QCN9070 Version: QCN9072 Version: QCN9074 Version: QCN9100 Version: QCN9274 Version: QCS410 Version: QCS610 Version: QCS6125 Version: QCS6490 Version: QRB5165M Version: QRB5165N Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Robotics RB3 Platform Version: Robotics RB5 Platform Version: SA6145P Version: SA6150P Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD660 Version: SD835 Version: SD855 Version: SD865 5G Version: SDM429W Version: SDX20M Version: SDX55 Version: SDX65M Version: Smart Audio 400 Platform Version: Snapdragon 429 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 820 Automotive Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 845 Mobile Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon Wear 2100 Platform Version: Snapdragon Wear 2500 Platform Version: Snapdragon Wear 3100 Platform Version: Snapdragon X20 LTE Modem Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon XR2 5G Platform Version: Snapdragon Auto 4G Modem Version: SW5100 Version: SW5100P Version: SXR2130 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9360 Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3620 Version: WCN3660B Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8835 |
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "aqt1000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ar8031_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ar9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "c-v2x_9150_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csr8811_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6620_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6640_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csrb31024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6200_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6700_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6900_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_7800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "flight_rb5_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_214_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_214_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_216_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_216_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_316_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_316_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_318_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_318_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq4018_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq4018_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq4019_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq4028_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq4028_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq4029_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq4029_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq5010_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq5028_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq5028_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6010_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6018_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6028_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8064_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8065_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8065_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8068_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8068_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8070_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8070_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8070a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8071a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8072a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8074a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8076_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8076a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8078_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8078_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8078a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8173_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8174_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq9008_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq9008_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq9574_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq9574_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9628_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9640_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9650_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "msm8909w_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8255p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8295p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca4024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6174a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6175a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6310_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6320_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6391_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6420_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6421_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6426_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6430_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6431_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6436_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6554a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6584au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6678aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6696_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6698aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6797aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca7500_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca7500_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8072_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8075_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8081_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8082_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8082_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8084_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8084_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8085_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8085_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8337_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8386_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8386_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9377_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9880_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9880_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9886_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9886_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9888_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9889_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9898_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9898_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9980_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9980_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9984_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9984_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9985_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9985_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9990_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9990_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9992_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9992_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9994_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9994_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5022_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5052_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5054_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5054_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5122_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5124_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5124_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5152_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5154_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5154_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5164_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5164_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6023_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6122_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6122_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6132_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6132_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn7605_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn7606_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9001_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9001_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9002_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9002_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9003_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9003_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9011_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9012_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9022_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9070_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9072_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9074_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9274_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs410_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs610_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qrb5165m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qrb5165n_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:robotics_rb3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "robotics_rb3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "robotics_rb5_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8195p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8255p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8295p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd660_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd855_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd865_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdm429w_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx20m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx20m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx55_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx65m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx65m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "smart_audio_400_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_429_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_660_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_660_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_665_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_665_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_8_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_820_automotive_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_835_mobile_pc_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_835_mobile_pc_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_845_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_845_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_855_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_855_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_865_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_5g_modem-rf_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_wear_2100_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_wear_2100_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_wear_2500_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_wear_2500_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_wear_3100_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_wear_3100_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x20_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x20_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x55_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x65_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_xr2_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_4g_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2130_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9340_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9341_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9360_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9370_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9375_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9385_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3620_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3660b_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3950_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3980_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3988_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3990_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8810_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8815_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8830_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-28541", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-07-08T15:17:04.629490Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-08T15:17:20.680Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-02T13:43:23.078Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer Electronics Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8031", }, { status: "affected", version: "AR9380", }, { status: "affected", version: "C-V2X 9150", }, { status: "affected", version: "CSR8811", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Immersive Home 214 Platform", }, { status: "affected", version: "Immersive Home 216 Platform", }, { status: "affected", version: "Immersive Home 316 Platform", }, { status: "affected", version: "Immersive Home 318 Platform", }, { status: "affected", version: "IPQ4018", }, { status: "affected", version: "IPQ4019", }, { status: "affected", version: "IPQ4028", }, { status: "affected", version: "IPQ4029", }, { status: "affected", version: "IPQ5010", }, { status: "affected", version: "IPQ5028", }, { status: "affected", version: "IPQ6000", }, { status: "affected", version: "IPQ6010", }, { status: "affected", version: "IPQ6018", }, { status: "affected", version: "IPQ6028", }, { status: "affected", version: "IPQ8064", }, { status: "affected", version: "IPQ8065", }, { status: "affected", version: "IPQ8068", }, { status: "affected", version: "IPQ8070", }, { status: "affected", version: "IPQ8070A", }, { status: "affected", version: "IPQ8071A", }, { status: "affected", version: "IPQ8072A", }, { status: "affected", version: "IPQ8074A", }, { status: "affected", version: "IPQ8076", }, { status: "affected", version: "IPQ8076A", }, { status: "affected", version: "IPQ8078", }, { status: "affected", version: "IPQ8078A", }, { status: "affected", version: "IPQ8173", }, { status: "affected", version: "IPQ8174", }, { status: "affected", version: "IPQ9008", }, { status: "affected", version: "IPQ9574", }, { status: "affected", version: "MDM9250", }, { status: "affected", version: "MDM9628", }, { status: "affected", version: "MDM9640", }, { status: "affected", version: "MDM9650", }, { status: "affected", version: "MSM8909W", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QCA4024", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6175A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6335", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6554A", }, { status: "affected", version: "QCA6564A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6678AQ", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA7500", }, { status: "affected", version: "QCA8072", }, { status: "affected", version: "QCA8075", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8082", }, { status: "affected", version: "QCA8084", }, { status: "affected", version: "QCA8085", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA8386", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCA9880", }, { status: "affected", version: "QCA9886", }, { status: "affected", version: "QCA9888", }, { status: "affected", version: "QCA9889", }, { status: "affected", version: "QCA9898", }, { status: "affected", version: "QCA9980", }, { status: "affected", version: "QCA9984", }, { status: "affected", version: "QCA9985", }, { status: "affected", version: "QCA9990", }, { status: "affected", version: "QCA9992", }, { status: "affected", version: "QCA9994", }, { status: "affected", version: "QCM6125", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN5022", }, { status: "affected", version: "QCN5024", }, { status: "affected", version: "QCN5052", }, { status: "affected", version: "QCN5054", }, { status: "affected", version: "QCN5122", }, { status: "affected", version: "QCN5124", }, { status: "affected", version: "QCN5152", }, { status: "affected", version: "QCN5154", }, { status: "affected", version: "QCN5164", }, { status: "affected", version: "QCN6023", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN6122", }, { status: "affected", version: "QCN6132", }, { status: "affected", version: "QCN7605", }, { status: "affected", version: "QCN7606", }, { status: "affected", version: "QCN9000", }, { status: "affected", version: "QCN9001", }, { status: "affected", version: "QCN9002", }, { status: "affected", version: "QCN9003", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9022", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCN9070", }, { status: "affected", version: "QCN9072", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCN9100", }, { status: "affected", version: "QCN9274", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6125", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Robotics RB3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SDM429W", }, { status: "affected", version: "SDX20M", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SDX65M", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Snapdragon 429 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 820 Automotive Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 845 Mobile Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon Wear 2100 Platform", }, { status: "affected", version: "Snapdragon Wear 2500 Platform", }, { status: "affected", version: "Snapdragon Wear 3100 Platform", }, { status: "affected", version: "Snapdragon X20 LTE Modem", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3620", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-126", description: "CWE-126 Buffer Over-read", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:20.999Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Buffer Over-read in WLAN Host", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-28541", datePublished: "2023-07-04T04:46:44.316Z", dateReserved: "2023-03-17T11:41:45.845Z", dateUpdated: "2024-08-02T13:43:23.078Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30697
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 14:16
Severity ?
EPSS score ?
Summary
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.115Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30697", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T14:16:19.115902Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T14:16:51.311Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.4, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-122 Heap-based Buffer Overflow", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:42.527Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30697", datePublished: "2023-08-10T01:18:42.527Z", dateReserved: "2023-04-14T01:59:51.127Z", dateUpdated: "2024-10-04T14:16:51.311Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21232
Vulnerability from cvelistv5
Published
2023-08-14 21:10
Modified
2024-10-09 14:12
Severity ?
EPSS score ?
Summary
In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.156Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21232", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:12:10.995689Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:12:19.947Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:10:31.494Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21232", datePublished: "2023-08-14T21:10:31.494Z", dateReserved: "2022-11-03T22:37:50.649Z", dateUpdated: "2024-10-09T14:12:19.947Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21270
Vulnerability from cvelistv5
Published
2024-11-19 18:00
Modified
2024-11-20 16:35
Severity ?
EPSS score ?
Summary
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoked due to incorrect permission flags cleared during an update. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "sc-dev", }, { status: "affected", version: "sc-v2-dev", }, { status: "affected", version: "tm-dev", }, ], }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-21270", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-11-20T16:32:43.516798Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-276", description: "CWE-276 Incorrect Default Permissions", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-11-20T16:35:48.663Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Andrioid", vendor: "Google", versions: [ { status: "affected", version: "sc-dev", }, { status: "affected", version: "sc-v2-dev", }, { status: "affected", version: "tm-dev", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<span style=\"background-color: rgb(255, 255, 255);\">In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoked due to incorrect permission flags cleared during an update. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.</span><br>", }, ], value: "In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoked due to incorrect permission flags cleared during an update. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", }, ], providerMetadata: { dateUpdated: "2024-11-19T18:00:47.701Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.2.0", }, }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21270", datePublished: "2024-11-19T18:00:47.701Z", dateReserved: "2022-11-03T22:37:50.654Z", dateUpdated: "2024-11-20T16:35:48.663Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21277
Vulnerability from cvelistv5
Published
2023-08-14 21:03
Modified
2024-10-09 14:56
Severity ?
EPSS score ?
Summary
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:33.116Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/9b58aee2a4528c60b0aa2540bd0f48d2871d2dc7", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21277", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:56:24.581895Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:56:42.802Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:03:04.607Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/9b58aee2a4528c60b0aa2540bd0f48d2871d2dc7", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21277", datePublished: "2023-08-14T21:03:04.607Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:56:42.802Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30654
Vulnerability from cvelistv5
Published
2023-08-10 01:17
Modified
2024-10-17 14:14
Severity ?
EPSS score ?
Summary
Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:51.828Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30654", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-17T14:14:19.744628Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-17T14:14:59.663Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-20 Improper Input Validation", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:17:07.618Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30654", datePublished: "2023-08-10T01:17:07.618Z", dateReserved: "2023-04-14T01:59:51.117Z", dateUpdated: "2024-10-17T14:14:59.663Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21273
Vulnerability from cvelistv5
Published
2023-08-14 21:01
Modified
2024-10-09 15:07
Severity ?
EPSS score ?
Summary
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.121Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1e27ef69755a0735278a1c6af130c71a92b94e3f", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21273", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T15:03:37.269306Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T15:07:41.403Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Remote code execution", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:01:24.805Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1e27ef69755a0735278a1c6af130c71a92b94e3f", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21273", datePublished: "2023-08-14T21:01:24.805Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T15:07:41.403Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30683
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 15:43
Severity ?
EPSS score ?
Summary
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.013Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30683", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T15:40:36.477131Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T15:43:03.187Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284 Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:26.950Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30683", datePublished: "2023-08-10T01:18:26.950Z", dateReserved: "2023-04-14T01:59:51.122Z", dateUpdated: "2024-10-04T15:43:03.187Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30684
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 15:06
Severity ?
EPSS score ?
Summary
Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.011Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30684", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T15:06:42.674236Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T15:06:57.136Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284 Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:28.281Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30684", datePublished: "2023-08-10T01:18:28.281Z", dateReserved: "2023-04-14T01:59:51.123Z", dateUpdated: "2024-10-04T15:06:57.136Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21289
Vulnerability from cvelistv5
Published
2023-08-14 21:07
Modified
2024-10-09 14:35
Severity ?
EPSS score ?
Summary
In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:33.148Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/7a5e51c918b7097be3c7e669e1825a4d159c4185", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21289", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:34:55.751576Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:35:14.526Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:07:27.693Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/7a5e51c918b7097be3c7e669e1825a4d159c4185", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21289", datePublished: "2023-08-14T21:07:27.693Z", dateReserved: "2022-11-03T22:37:50.656Z", dateUpdated: "2024-10-09T14:35:14.526Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21274
Vulnerability from cvelistv5
Published
2023-08-14 21:01
Modified
2024-10-09 15:02
Severity ?
EPSS score ?
Summary
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.168Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/2bffd7f5e66dd0cf7e5668fb65c4f2b2e9f87cf7", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21274", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T15:02:44.883376Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T15:02:59.444Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:01:43.205Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/2bffd7f5e66dd0cf7e5668fb65c4f2b2e9f87cf7", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21274", datePublished: "2023-08-14T21:01:43.205Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T15:02:59.444Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21269
Vulnerability from cvelistv5
Published
2023-08-14 21:00
Modified
2024-10-09 15:25
Severity ?
EPSS score ?
Summary
In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.137Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/70ec64dc5a2a816d6aa324190a726a85fd749b30", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21269", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T15:23:08.834309Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-266", description: "CWE-266 Incorrect Privilege Assignment", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T15:25:42.936Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:00:08.724Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/70ec64dc5a2a816d6aa324190a726a85fd749b30", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21269", datePublished: "2023-08-14T21:00:08.724Z", dateReserved: "2022-11-03T22:37:50.654Z", dateUpdated: "2024-10-09T15:25:42.936Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-20755
Vulnerability from cvelistv5
Published
2023-07-04 01:44
Modified
2024-12-04 17:21
Severity ?
EPSS score ?
Summary
In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07509605.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:14:40.984Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://corp.mediatek.com/product-security-bulletin/July-2023", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-20755", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-12-04T17:20:57.998358Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-12-04T17:21:10.822Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797", vendor: "MediaTek, Inc.", versions: [ { status: "affected", version: "Android 11.0, 12.0, 13.0", }, ], }, ], descriptions: [ { lang: "en", value: "In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07509605.", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of Privilege", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-07-04T01:44:05.320Z", orgId: "ee979b05-11f8-4f25-a7e0-a1fa9c190374", shortName: "MediaTek", }, references: [ { url: "https://corp.mediatek.com/product-security-bulletin/July-2023", }, ], }, }, cveMetadata: { assignerOrgId: "ee979b05-11f8-4f25-a7e0-a1fa9c190374", assignerShortName: "MediaTek", cveId: "CVE-2023-20755", datePublished: "2023-07-04T01:44:05.320Z", dateReserved: "2022-10-28T02:03:10.771Z", dateUpdated: "2024-12-04T17:21:10.822Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21672
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 09:44
Severity ?
EPSS score ?
Summary
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: FastConnect 6700 Version: FastConnect 6900 Version: FastConnect 7800 Version: QAM8255P Version: QAM8295P Version: QAM8650P Version: QAM8775P Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCM4325 Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 8 Gen1 5G Version: SD865 5G Version: SG4150P Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon AR2 Gen 1 Platform Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon XR2 5G Platform Version: SSG2115P Version: SSG2125P Version: SW5100 Version: SW5100P Version: SXR1230P Version: SXR2230P Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:44:02.233Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QAM8650P", }, { status: "affected", version: "QAM8775P", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "SSG2115P", }, { status: "affected", version: "SSG2125P", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1230P", }, { status: "affected", version: "SXR2230P", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-416", description: "CWE-416 Use After Free", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:24:59.149Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Use After Free in Audio", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-21672", datePublished: "2023-07-04T04:46:37.961Z", dateReserved: "2022-12-07T02:58:25.876Z", dateUpdated: "2024-08-02T09:44:02.233Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30689
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 17:17
Severity ?
EPSS score ?
Summary
Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.077Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung_mobile", versions: [ { status: "affected", version: "SMR_Aug_2023_Release_1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30689", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T17:14:53.760863Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T17:17:23.087Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:34.632Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30689", datePublished: "2023-08-10T01:18:34.632Z", dateReserved: "2023-04-14T01:59:51.125Z", dateUpdated: "2024-10-10T17:17:23.087Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2022-28350
Vulnerability from cvelistv5
Published
2022-05-19 01:04
Modified
2024-08-03 05:56
Severity ?
EPSS score ?
Summary
Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.
References
| ▼ | URL | Tags |
|---|---|---|
| https://developer.arm.com/support/arm-security-updates | x_refsource_MISC | |
| https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities | x_refsource_CONFIRM |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T05:56:14.915Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://developer.arm.com/support/arm-security-updates", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-05-19T01:04:14", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://developer.arm.com/support/arm-security-updates", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2022-28350", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://developer.arm.com/support/arm-security-updates", refsource: "MISC", url: "https://developer.arm.com/support/arm-security-updates", }, { name: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", refsource: "CONFIRM", url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2022-28350", datePublished: "2022-05-19T01:04:14", dateReserved: "2022-04-02T00:00:00", dateUpdated: "2024-08-03T05:56:14.915Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30686
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 17:24
Severity ?
EPSS score ?
Summary
Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.074Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung_mobile", versions: [ { status: "affected", version: "SMR_Aug_2023 Release 1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30686", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T17:22:58.422489Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T17:24:07.191Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:30.732Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30686", datePublished: "2023-08-10T01:18:30.732Z", dateReserved: "2023-04-14T01:59:51.123Z", dateUpdated: "2024-10-10T17:24:07.191Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21281
Vulnerability from cvelistv5
Published
2023-08-14 21:05
Modified
2024-10-09 14:49
Severity ?
EPSS score ?
Summary
In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.889Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/badb243574d7fca9aa89152d9d25eeb4f8615385", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21281", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:48:47.046036Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:49:58.512Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:05:06.431Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/badb243574d7fca9aa89152d9d25eeb4f8615385", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21281", datePublished: "2023-08-14T21:05:06.431Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:49:58.512Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-22667
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-10-24 19:11
Severity ?
EPSS score ?
Summary
Memory Corruption in Audio while allocating the ion buffer during the music playback.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: 315 5G IoT Modem Version: APQ8017 Version: AQT1000 Version: AR8031 Version: AR8035 Version: CSRA6620 Version: CSRA6640 Version: CSRB31024 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: Flight RB5 5G Platform Version: Home Hub 100 Platform Version: MDM9628 Version: MSM8108 Version: MSM8209 Version: MSM8608 Version: MSM8996AU Version: QAM8255P Version: QAM8295P Version: QCA6174A Version: QCA6310 Version: QCA6320 Version: QCA6335 Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6564 Version: QCA6564A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6584AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA8337 Version: QCA9377 Version: QCA9379 Version: QCM2290 Version: QCM4290 Version: QCM6125 Version: QCM6490 Version: QCN9011 Version: QCN9012 Version: QCN9074 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS610 Version: QCS6125 Version: QCS6490 Version: QCS8250 Version: QRB5165M Version: QRB5165N Version: QSM8250 Version: Qualcomm 205 Mobile Platform Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Qualcomm Video Collaboration VC5 Platform Version: Robotics RB3 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155 Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155 Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 675 Version: SD 8 Gen1 5G Version: SD626 Version: SD660 Version: SD670 Version: SD675 Version: SD730 Version: SD820 Version: SD821 Version: SD835 Version: SD855 Version: SD865 5G Version: SD888 Version: SDM429W Version: SDX55 Version: SM4125 Version: SM6250 Version: SM6250P Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 200 Platform Version: Smart Audio 400 Platform Version: Smart Display 200 Platform (APQ5053-AA) Version: Snapdragon 208 Processor Version: Snapdragon 210 Processor Version: Snapdragon 212 Mobile Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 425 Mobile Platform Version: Snapdragon 429 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 450 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 625 Mobile Platform Version: Snapdragon 626 Mobile Platform Version: Snapdragon 630 Mobile Platform Version: Snapdragon 632 Mobile Platform Version: Snapdragon 636 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 670 Mobile Platform Version: Snapdragon 675 Mobile Platform Version: Snapdragon 678 Mobile Platform (SM6150-AC) Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 710 Mobile Platform Version: Snapdragon 720G Mobile Platform Version: Snapdragon 730 Mobile Platform (SM7150-AA) Version: Snapdragon 730G Mobile Platform (SM7150-AB) Version: Snapdragon 732G Mobile Platform (SM7150-AC) Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 820 Automotive Platform Version: Snapdragon 820 Mobile Platform Version: Snapdragon 821 Mobile Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 845 Mobile Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon Wear 4100+ Platform Version: Snapdragon X12 LTE Modem Version: Snapdragon X24 LTE Modem Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon XR1 Platform Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: Snapdragon Auto 4G Modem Version: SXR1120 Version: SXR2130 Version: Vision Intelligence 100 Platform (APQ8053-AA) Version: Vision Intelligence 200 Platform (APQ8053-AC) Version: Vision Intelligence 400 Platform Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9360 Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3610 Version: WCN3615 Version: WCN3620 Version: WCN3660 Version: WCN3660B Version: WCN3680 Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T10:13:49.966Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:h:qualcomm:snapdragon:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon", vendor: "qualcomm", versions: [ { status: "affected", version: "315 5G IoT Modem", }, { status: "affected", version: "APQ8017", }, { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8031", }, { status: "affected", version: "AR8035", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Home Hub 100 Platform", }, { status: "affected", version: "MDM9628", }, { status: "affected", version: "MSM8108", }, { status: "affected", version: "MSM8209", }, { status: "affected", version: "MSM8608", }, { status: "affected", version: "MSM8996AU", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6335", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6564", }, { status: "affected", version: "QCA6564A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCA9379", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM6125", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6125", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8250", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "QSM8250", }, { status: "affected", version: "Qualcomm 205 Mobile Platform", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC5 Platform", }, { status: "affected", version: "Robotics RB3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 675", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD626", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD670", }, { status: "affected", version: "SD675", }, { status: "affected", version: "SD730", }, { status: "affected", version: "SD820", }, { status: "affected", version: "SD821", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDM429W", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SM4125", }, { status: "affected", version: "SM6250", }, { status: "affected", version: "SM6250P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 200 Platform", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Smart Display 200 Platform (APQ5053-AA)", }, { status: "affected", version: "Snapdragon 208 Processor", }, { status: "affected", version: "Snapdragon 210 Processor", }, { status: "affected", version: "Snapdragon 212 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 425 Mobile Platform", }, { status: "affected", version: "Snapdragon 429 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 450 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 625 Mobile Platform", }, { status: "affected", version: "Snapdragon 626 Mobile Platform", }, { status: "affected", version: "Snapdragon 630 Mobile Platform", }, { status: "affected", version: "Snapdragon 632 Mobile Platform", }, { status: "affected", version: "Snapdragon 636 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 670 Mobile Platform", }, { status: "affected", version: "Snapdragon 675 Mobile Platform", }, { status: "affected", version: "Snapdragon 678 Mobile Platform (SM6150-AC)", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 710 Mobile Platform", }, { status: "affected", version: "Snapdragon 720G Mobile Platform", }, { status: "affected", version: "Snapdragon 730 Mobile Platform (SM7150-AA)", }, { status: "affected", version: "Snapdragon 730G Mobile Platform (SM7150-AB)", }, { status: "affected", version: "Snapdragon 732G Mobile Platform (SM7150-AC)", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 820 Automotive Platform", }, { status: "affected", version: "Snapdragon 820 Mobile Platform", }, { status: "affected", version: "Snapdragon 821 Mobile Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 845 Mobile Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon Wear 4100+ Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X24 LTE Modem", }, { status: "affected", version: "Snapdragon X50 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR1 Platform", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SXR1120", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "Vision Intelligence 100 Platform (APQ8053-AA)", }, { status: "affected", version: "Vision Intelligence 200 Platform (APQ8053-AC)", }, { status: "affected", version: "Vision Intelligence 400 Platform", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3610", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3620", }, { status: "affected", version: "WCN3660", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-22667", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-24T19:04:38.127666Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-24T19:11:39.267Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "315 5G IoT Modem", }, { status: "affected", version: "APQ8017", }, { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8031", }, { status: "affected", version: "AR8035", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Home Hub 100 Platform", }, { status: "affected", version: "MDM9628", }, { status: "affected", version: "MSM8108", }, { status: "affected", version: "MSM8209", }, { status: "affected", version: "MSM8608", }, { status: "affected", version: "MSM8996AU", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6335", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6564", }, { status: "affected", version: "QCA6564A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCA9379", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM6125", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6125", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8250", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "QSM8250", }, { status: "affected", version: "Qualcomm 205 Mobile Platform", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC5 Platform", }, { status: "affected", version: "Robotics RB3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 675", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD626", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD670", }, { status: "affected", version: "SD675", }, { status: "affected", version: "SD730", }, { status: "affected", version: "SD820", }, { status: "affected", version: "SD821", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDM429W", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SM4125", }, { status: "affected", version: "SM6250", }, { status: "affected", version: "SM6250P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 200 Platform", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Smart Display 200 Platform (APQ5053-AA)", }, { status: "affected", version: "Snapdragon 208 Processor", }, { status: "affected", version: "Snapdragon 210 Processor", }, { status: "affected", version: "Snapdragon 212 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 425 Mobile Platform", }, { status: "affected", version: "Snapdragon 429 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 450 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 625 Mobile Platform", }, { status: "affected", version: "Snapdragon 626 Mobile Platform", }, { status: "affected", version: "Snapdragon 630 Mobile Platform", }, { status: "affected", version: "Snapdragon 632 Mobile Platform", }, { status: "affected", version: "Snapdragon 636 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 670 Mobile Platform", }, { status: "affected", version: "Snapdragon 675 Mobile Platform", }, { status: "affected", version: "Snapdragon 678 Mobile Platform (SM6150-AC)", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 710 Mobile Platform", }, { status: "affected", version: "Snapdragon 720G Mobile Platform", }, { status: "affected", version: "Snapdragon 730 Mobile Platform (SM7150-AA)", }, { status: "affected", version: "Snapdragon 730G Mobile Platform (SM7150-AB)", }, { status: "affected", version: "Snapdragon 732G Mobile Platform (SM7150-AC)", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 820 Automotive Platform", }, { status: "affected", version: "Snapdragon 820 Mobile Platform", }, { status: "affected", version: "Snapdragon 821 Mobile Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 845 Mobile Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon Wear 4100+ Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X24 LTE Modem", }, { status: "affected", version: "Snapdragon X50 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR1 Platform", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SXR1120", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "Vision Intelligence 100 Platform (APQ8053-AA)", }, { status: "affected", version: "Vision Intelligence 200 Platform (APQ8053-AC)", }, { status: "affected", version: "Vision Intelligence 400 Platform", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3610", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3620", }, { status: "affected", version: "WCN3660", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in Audio while allocating the ion buffer during the music playback.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-190", description: "CWE-190 Integer Overflow or Wraparound", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:10.547Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Integer Overflow or Wraparound in Audio", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-22667", datePublished: "2023-07-04T04:46:41.414Z", dateReserved: "2023-01-06T05:06:07.907Z", dateUpdated: "2024-10-24T19:11:39.267Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30700
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 14:17
Severity ?
EPSS score ?
Summary
PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.114Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30700", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T14:16:07.407575Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T14:17:29.339Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-287 Improper Authentication", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:46.641Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30700", datePublished: "2023-08-10T01:18:46.641Z", dateReserved: "2023-04-14T01:59:51.128Z", dateUpdated: "2024-10-04T14:17:29.339Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-22387
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 10:07
Severity ?
EPSS score ?
Summary
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: 315 5G IoT Modem Version: APQ8017 Version: AQT1000 Version: AR8031 Version: AR8035 Version: AR9380 Version: C-V2X 9150 Version: CSR8811 Version: CSRA6620 Version: CSRA6640 Version: CSRB31024 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: Flight RB5 5G Platform Version: Home Hub 100 Platform Version: Immersive Home 214 Platform Version: Immersive Home 216 Platform Version: Immersive Home 316 Platform Version: Immersive Home 318 Platform Version: IPQ4018 Version: IPQ4019 Version: IPQ4028 Version: IPQ4029 Version: IPQ5010 Version: IPQ5028 Version: IPQ6010 Version: IPQ6018 Version: IPQ6028 Version: IPQ8064 Version: IPQ8065 Version: IPQ8068 Version: IPQ8070 Version: IPQ8070A Version: IPQ8071A Version: IPQ8072A Version: IPQ8074A Version: IPQ8076 Version: IPQ8076A Version: IPQ8078 Version: IPQ8078A Version: IPQ8173 Version: IPQ8174 Version: PMP8074 Version: QAM8255P Version: QAM8295P Version: QAM8650P Version: QAM8775P Version: QCA4024 Version: QCA6174A Version: QCA6310 Version: QCA6335 Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6564 Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA7500 Version: QCA8072 Version: QCA8075 Version: QCA8081 Version: QCA8337 Version: QCA9377 Version: QCA9379 Version: QCA9880 Version: QCA9886 Version: QCA9888 Version: QCA9889 Version: QCA9898 Version: QCA9980 Version: QCA9984 Version: QCA9985 Version: QCA9986 Version: QCA9990 Version: QCA9992 Version: QCA9994 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM6125 Version: QCM6490 Version: QCN5021 Version: QCN5022 Version: QCN5024 Version: QCN5052 Version: QCN5054 Version: QCN5122 Version: QCN5124 Version: QCN5152 Version: QCN5154 Version: QCN5164 Version: QCN6023 Version: QCN6024 Version: QCN6122 Version: QCN6132 Version: QCN9000 Version: QCN9011 Version: QCN9012 Version: QCN9022 Version: QCN9024 Version: QCN9070 Version: QCN9072 Version: QCN9074 Version: QCN9100 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS4490 Version: QCS610 Version: QCS6125 Version: QCS6490 Version: QCS8155 Version: QCS8250 Version: QRB5165M Version: QRB5165N Version: QSM8250 Version: Qualcomm 205 Mobile Platform Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Qualcomm Video Collaboration VC5 Platform Version: Robotics RB3 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155 Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155 Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 675 Version: SD 8 Gen1 5G Version: SD626 Version: SD660 Version: SD670 Version: SD675 Version: SD730 Version: SD855 Version: SD865 5G Version: SD888 Version: SDM429W Version: SDX55 Version: SG4150P Version: SM4125 Version: SM6250 Version: SM6250P Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 200 Platform Version: Smart Audio 400 Platform Version: Smart Display 200 Platform (APQ5053-AA) Version: Snapdragon 210 Processor Version: Snapdragon 212 Mobile Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 425 Mobile Platform Version: Snapdragon 429 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 625 Mobile Platform Version: Snapdragon 626 Mobile Platform Version: Snapdragon 632 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 670 Mobile Platform Version: Snapdragon 675 Mobile Platform Version: Snapdragon 678 Mobile Platform (SM6150-AC) Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 710 Mobile Platform Version: Snapdragon 720G Mobile Platform Version: Snapdragon 730 Mobile Platform (SM7150-AA) Version: Snapdragon 730G Mobile Platform (SM7150-AB) Version: Snapdragon 732G Mobile Platform (SM7150-AC) Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 845 Mobile Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon AR2 Gen 1 Platform Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon Wear 4100+ Platform Version: Snapdragon X12 LTE Modem Version: Snapdragon X24 LTE Modem Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon XR1 Platform Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: Snapdragon Auto 4G Modem Version: SSG2115P Version: SSG2125P Version: SW5100 Version: SW5100P Version: SXR1120 Version: SXR1230P Version: SXR2130 Version: SXR2230P Version: Vision Intelligence 100 Platform (APQ8053-AA) Version: Vision Intelligence 200 Platform (APQ8053-AC) Version: Vision Intelligence 400 Platform Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9360 Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3610 Version: WCN3615 Version: WCN3620 Version: WCN3660B Version: WCN3680 Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T10:07:06.588Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "315 5G IoT Modem", }, { status: "affected", version: "APQ8017", }, { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8031", }, { status: "affected", version: "AR8035", }, { status: "affected", version: "AR9380", }, { status: "affected", version: "C-V2X 9150", }, { status: "affected", version: "CSR8811", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Home Hub 100 Platform", }, { status: "affected", version: "Immersive Home 214 Platform", }, { status: "affected", version: "Immersive Home 216 Platform", }, { status: "affected", version: "Immersive Home 316 Platform", }, { status: "affected", version: "Immersive Home 318 Platform", }, { status: "affected", version: "IPQ4018", }, { status: "affected", version: "IPQ4019", }, { status: "affected", version: "IPQ4028", }, { status: "affected", version: "IPQ4029", }, { status: "affected", version: "IPQ5010", }, { status: "affected", version: "IPQ5028", }, { status: "affected", version: "IPQ6010", }, { status: "affected", version: "IPQ6018", }, { status: "affected", version: "IPQ6028", }, { status: "affected", version: "IPQ8064", }, { status: "affected", version: "IPQ8065", }, { status: "affected", version: "IPQ8068", }, { status: "affected", version: "IPQ8070", }, { status: "affected", version: "IPQ8070A", }, { status: "affected", version: "IPQ8071A", }, { status: "affected", version: "IPQ8072A", }, { status: "affected", version: "IPQ8074A", }, { status: "affected", version: "IPQ8076", }, { status: "affected", version: "IPQ8076A", }, { status: "affected", version: "IPQ8078", }, { status: "affected", version: "IPQ8078A", }, { status: "affected", version: "IPQ8173", }, { status: "affected", version: "IPQ8174", }, { status: "affected", version: "PMP8074", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QAM8650P", }, { status: "affected", version: "QAM8775P", }, { status: "affected", version: "QCA4024", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6335", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6564", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA7500", }, { status: "affected", version: "QCA8072", }, { status: "affected", version: "QCA8075", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCA9379", }, { status: "affected", version: "QCA9880", }, { status: "affected", version: "QCA9886", }, { status: "affected", version: "QCA9888", }, { status: "affected", version: "QCA9889", }, { status: "affected", version: "QCA9898", }, { status: "affected", version: "QCA9980", }, { status: "affected", version: "QCA9984", }, { status: "affected", version: "QCA9985", }, { status: "affected", version: "QCA9986", }, { status: "affected", version: "QCA9990", }, { status: "affected", version: "QCA9992", }, { status: "affected", version: "QCA9994", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "QCM4490", }, { status: "affected", version: "QCM6125", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN5021", }, { status: "affected", version: "QCN5022", }, { status: "affected", version: "QCN5024", }, { status: "affected", version: "QCN5052", }, { status: "affected", version: "QCN5054", }, { status: "affected", version: "QCN5122", }, { status: "affected", version: "QCN5124", }, { status: "affected", version: "QCN5152", }, { status: "affected", version: "QCN5154", }, { status: "affected", version: "QCN5164", }, { status: "affected", version: "QCN6023", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN6122", }, { status: "affected", version: "QCN6132", }, { status: "affected", version: "QCN9000", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9022", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCN9070", }, { status: "affected", version: "QCN9072", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCN9100", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS4490", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6125", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8155", }, { status: "affected", version: "QCS8250", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "QSM8250", }, { status: "affected", version: "Qualcomm 205 Mobile Platform", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC5 Platform", }, { status: "affected", version: "Robotics RB3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 675", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD626", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD670", }, { status: "affected", version: "SD675", }, { status: "affected", version: "SD730", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDM429W", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "SM4125", }, { status: "affected", version: "SM6250", }, { status: "affected", version: "SM6250P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 200 Platform", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Smart Display 200 Platform (APQ5053-AA)", }, { status: "affected", version: "Snapdragon 210 Processor", }, { status: "affected", version: "Snapdragon 212 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 425 Mobile Platform", }, { status: "affected", version: "Snapdragon 429 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 625 Mobile Platform", }, { status: "affected", version: "Snapdragon 626 Mobile Platform", }, { status: "affected", version: "Snapdragon 632 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 670 Mobile Platform", }, { status: "affected", version: "Snapdragon 675 Mobile Platform", }, { status: "affected", version: "Snapdragon 678 Mobile Platform (SM6150-AC)", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 710 Mobile Platform", }, { status: "affected", version: "Snapdragon 720G Mobile Platform", }, { status: "affected", version: "Snapdragon 730 Mobile Platform (SM7150-AA)", }, { status: "affected", version: "Snapdragon 730G Mobile Platform (SM7150-AB)", }, { status: "affected", version: "Snapdragon 732G Mobile Platform (SM7150-AC)", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 845 Mobile Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon Wear 4100+ Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X24 LTE Modem", }, { status: "affected", version: "Snapdragon X50 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR1 Platform", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SSG2115P", }, { status: "affected", version: "SSG2125P", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1120", }, { status: "affected", version: "SXR1230P", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "SXR2230P", }, { status: "affected", version: "Vision Intelligence 100 Platform (APQ8053-AA)", }, { status: "affected", version: "Vision Intelligence 200 Platform (APQ8053-AC)", }, { status: "affected", version: "Vision Intelligence 400 Platform", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3610", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3620", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-823", description: "CWE-823 Use of Out-of-range Pointer Offset", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:06.554Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Use of Out-of-range Pointer Offset in Qualcomm IPC", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-22387", datePublished: "2023-07-04T04:46:40.252Z", dateReserved: "2022-12-21T09:50:17.669Z", dateUpdated: "2024-08-02T10:07:06.588Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21230
Vulnerability from cvelistv5
Published
2023-08-14 21:10
Modified
2024-10-09 14:11
Severity ?
EPSS score ?
Summary
In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.124Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21230", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:11:06.886141Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:11:15.437Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:10:56.039Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21230", datePublished: "2023-08-14T21:10:56.039Z", dateReserved: "2022-11-03T22:37:50.649Z", dateUpdated: "2024-10-09T14:11:15.437Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21265
Vulnerability from cvelistv5
Published
2023-08-14 20:59
Modified
2024-10-09 19:08
Severity ?
EPSS score ?
Summary
In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.237Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/system/ca-certificates/+/6065b4a4c7da9cc9ee01c2f6389575647d2724c4", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, }, { other: { content: { id: "CVE-2023-21265", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:05:02.348379Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-295", description: "CWE-295 Improper Certificate Validation", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T19:08:41.995Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:59:28.509Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/system/ca-certificates/+/6065b4a4c7da9cc9ee01c2f6389575647d2724c4", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21265", datePublished: "2023-08-14T20:59:28.509Z", dateReserved: "2022-11-03T22:37:50.653Z", dateUpdated: "2024-10-09T19:08:41.995Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21290
Vulnerability from cvelistv5
Published
2023-08-14 21:07
Modified
2024-10-09 14:34
Severity ?
EPSS score ?
Summary
In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.933Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21290", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:34:11.772081Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:34:21.752Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Denial of service", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:07:55.891Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21290", datePublished: "2023-08-14T21:07:55.891Z", dateReserved: "2022-11-03T22:37:50.656Z", dateUpdated: "2024-10-09T14:34:21.752Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21271
Vulnerability from cvelistv5
Published
2023-08-14 21:00
Modified
2024-10-09 15:20
Severity ?
EPSS score ?
Summary
In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.161Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21271", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T15:16:19.831198Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T15:20:34.383Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:00:47.078Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21271", datePublished: "2023-08-14T21:00:47.078Z", dateReserved: "2022-11-03T22:37:50.654Z", dateUpdated: "2024-10-09T15:20:34.383Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21287
Vulnerability from cvelistv5
Published
2023-08-14 21:06
Modified
2024-10-09 14:39
Severity ?
EPSS score ?
Summary
In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.998Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/external/freetype/+/a79e80a25874dacaa266906a9048f13d4bac41c6", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:google:admob:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "admob", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21287", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:37:29.122726Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:39:52.582Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Remote code execution", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:06:53.599Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/external/freetype/+/a79e80a25874dacaa266906a9048f13d4bac41c6", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21287", datePublished: "2023-08-14T21:06:51.823Z", dateReserved: "2022-11-03T22:37:50.656Z", dateUpdated: "2024-10-09T14:39:52.582Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-28542
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 13:43
Severity ?
EPSS score ?
Summary
Memory Corruption in WLAN HOST while fetching TX status information.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: 315 5G IoT Modem Version: APQ8064AU Version: AQT1000 Version: AR8031 Version: AR8035 Version: C-V2X 9150 Version: CSRA6620 Version: CSRA6640 Version: CSRB31024 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: Flight RB5 5G Platform Version: MDM9250 Version: MDM9628 Version: MDM9650 Version: MSM8996AU Version: QAM8255P Version: QAM8295P Version: QCA6174A Version: QCA6175A Version: QCA6310 Version: QCA6320 Version: QCA6335 Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6554A Version: QCA6564 Version: QCA6564A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6584 Version: QCA6584AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA8081 Version: QCA8337 Version: QCA9367 Version: QCA9377 Version: QCM2290 Version: QCM4290 Version: QCM6125 Version: QCM6490 Version: QCN6024 Version: QCN9011 Version: QCN9012 Version: QCN9024 Version: QCN9074 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS610 Version: QCS6125 Version: QCS6490 Version: QCS8250 Version: QRB5165M Version: QRB5165N Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Qualcomm Video Collaboration VC5 Platform Version: Robotics RB3 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155 Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155 Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 675 Version: SD 8 Gen1 5G Version: SD660 Version: SD670 Version: SD675 Version: SD730 Version: SD835 Version: SD855 Version: SD865 5G Version: SD888 Version: SDX20M Version: SDX55 Version: SM4125 Version: SM6250 Version: SM6250P Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 400 Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 630 Mobile Platform Version: Snapdragon 636 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 670 Mobile Platform Version: Snapdragon 675 Mobile Platform Version: Snapdragon 678 Mobile Platform (SM6150-AC) Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 710 Mobile Platform Version: Snapdragon 720G Mobile Platform Version: Snapdragon 730 Mobile Platform (SM7150-AA) Version: Snapdragon 730G Mobile Platform (SM7150-AB) Version: Snapdragon 732G Mobile Platform (SM7150-AC) Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 820 Automotive Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 845 Mobile Platform Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon AR2 Gen 1 Platform Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon X20 LTE Modem Version: Snapdragon X24 LTE Modem Version: Snapdragon X5 LTE Modem Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon XR1 Platform Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: Snapdragon Auto 4G Modem Version: SW5100 Version: SW5100P Version: SXR1120 Version: SXR2130 Version: Vision Intelligence 400 Platform Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9360 Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:qualcomm:315_5g_iot_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "315_5g_iot_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "apq8064au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "aqt1000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ar8031_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ar8035_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "c-v2x_9150_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6620_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6640_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csrb31024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6200_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6700_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6900_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_7800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "flight_rb5_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9628_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "mdm9650_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "msm8996au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8255p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8295p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6174a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6175a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6310_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6320_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6391_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6420_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6421_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6426_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6430_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6431_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6436_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6554a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6584_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6584au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6696_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6698aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6797aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8081_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8337_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9367_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9377_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm2290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9011_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9012_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9074_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs2290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs410_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs4290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs610_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs8250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qrb5165m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qrb5165n_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc5_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:robotics_rb3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "robotics_rb3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "robotics_rb5_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa4150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa4155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa4155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6155_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8155_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8195p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8255p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8295p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd_675_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd_8_gen1_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd660_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd670_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd675_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd730_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd855_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd865_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd888_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx20m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx20m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx55_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm4125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm6250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm6250p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7250p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7315_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7325p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "smart_audio_400_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_4_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_4_gen_2_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_460_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_480_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_630_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_630_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_636_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_636_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_660_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_660_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_662_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_665_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_665_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_670_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_670_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_675_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_675_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_680_4g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_690_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_690_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_695_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_710_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_710_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_720g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_720g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_750g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_750g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_778g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_780g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_8_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_820_automotive_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_835_mobile_pc_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_835_mobile_pc_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_845_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_845_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_855_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_855_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_865_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_888_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_ar2_gen_1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_5g_modem-rf_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x20_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x20_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x24_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x24_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x5_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x50_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x50_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x55_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x65_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_xr1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_xr1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_xr2_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_4g_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr1120_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr1120_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2130_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:vision_intelligence_400_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "vision_intelligence_400_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9326_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9340_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9341_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9360_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9370_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9371_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9375_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9385_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3910_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3950_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3980_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3988_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3990_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6740_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8810_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8815_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8830_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8832_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-28542", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-07-11T20:23:54.788847Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-11T20:24:05.329Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-02T13:43:22.689Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "315 5G IoT Modem", }, { status: "affected", version: "APQ8064AU", }, { status: "affected", version: "AQT1000", }, { status: "affected", version: "AR8031", }, { status: "affected", version: "AR8035", }, { status: "affected", version: "C-V2X 9150", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "CSRB31024", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "MDM9250", }, { status: "affected", version: "MDM9628", }, { status: "affected", version: "MDM9650", }, { status: "affected", version: "MSM8996AU", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6175A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6335", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6420", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6430", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6554A", }, { status: "affected", version: "QCA6564", }, { status: "affected", version: "QCA6564A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA9367", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM6125", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6125", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8250", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC5 Platform", }, { status: "affected", version: "Robotics RB3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 675", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD670", }, { status: "affected", version: "SD675", }, { status: "affected", version: "SD730", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD855", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDX20M", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SM4125", }, { status: "affected", version: "SM6250", }, { status: "affected", version: "SM6250P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 630 Mobile Platform", }, { status: "affected", version: "Snapdragon 636 Mobile Platform", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 665 Mobile Platform", }, { status: "affected", version: "Snapdragon 670 Mobile Platform", }, { status: "affected", version: "Snapdragon 675 Mobile Platform", }, { status: "affected", version: "Snapdragon 678 Mobile Platform (SM6150-AC)", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 710 Mobile Platform", }, { status: "affected", version: "Snapdragon 720G Mobile Platform", }, { status: "affected", version: "Snapdragon 730 Mobile Platform (SM7150-AA)", }, { status: "affected", version: "Snapdragon 730G Mobile Platform (SM7150-AB)", }, { status: "affected", version: "Snapdragon 732G Mobile Platform (SM7150-AC)", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 820 Automotive Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 845 Mobile Platform", }, { status: "affected", version: "Snapdragon 855 Mobile Platform", }, { status: "affected", version: "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon X20 LTE Modem", }, { status: "affected", version: "Snapdragon X24 LTE Modem", }, { status: "affected", version: "Snapdragon X5 LTE Modem", }, { status: "affected", version: "Snapdragon X50 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR1 Platform", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 4G Modem", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1120", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "Vision Intelligence 400 Platform", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9360", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in WLAN HOST while fetching TX status information.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-126", description: "CWE-126 Buffer Over-read", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:24.511Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Buffer Over-read in WLAN HOST", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-28542", datePublished: "2023-07-04T04:46:45.239Z", dateReserved: "2023-03-17T11:41:45.845Z", dateUpdated: "2024-08-02T13:43:22.689Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21284
Vulnerability from cvelistv5
Published
2023-08-14 21:06
Modified
2024-10-09 14:44
Severity ?
EPSS score ?
Summary
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.932Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/ed3f25b7222d4cff471f2b7d22d1150348146957", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21284", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:43:59.814341Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:44:30.690Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Denial of service", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:06:09.845Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/ed3f25b7222d4cff471f2b7d22d1150348146957", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21284", datePublished: "2023-08-14T21:06:09.845Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:44:30.690Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30680
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 17:26
Severity ?
EPSS score ?
Summary
Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.161Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung_mobile", versions: [ { status: "affected", version: "SMR_Aug-2023_Release 1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30680", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T17:24:52.301470Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-266", description: "CWE-266 Incorrect Privilege Assignment", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-10T17:26:38.288Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 8.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-269: Improper Privilege Management", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:23.078Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30680", datePublished: "2023-08-10T01:18:23.078Z", dateReserved: "2023-04-14T01:59:51.121Z", dateUpdated: "2024-10-10T17:26:38.288Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21276
Vulnerability from cvelistv5
Published
2023-08-14 21:02
Modified
2024-10-09 14:58
Severity ?
EPSS score ?
Summary
In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.963Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/1272eec833fb49c30a4d8bdc432765e7c4413b3f", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21276", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:57:51.241986Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:58:03.031Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:02:38.148Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/1272eec833fb49c30a4d8bdc432765e7c4413b3f", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21276", datePublished: "2023-08-14T21:02:38.148Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:58:03.031Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30687
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 17:22
Severity ?
EPSS score ?
Summary
Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:52.078Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung_mobile", versions: [ { status: "affected", version: "SMR_Aug_2023_Release 1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30687", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T17:20:26.424266Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T17:22:10.892Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:32.014Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30687", datePublished: "2023-08-10T01:18:32.014Z", dateReserved: "2023-04-14T01:59:51.124Z", dateUpdated: "2024-10-10T17:22:10.892Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-20965
Vulnerability from cvelistv5
Published
2023-08-14 20:48
Modified
2024-10-09 19:13
Severity ?
EPSS score ?
Summary
In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:21:33.814Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/88a8a98934215f591605028e200b6eca8f7cc45a", }, { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/bd318b9772759546509f6fdb8648366099dd65ad", }, { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/0d3cb609b0851ea9e5745cc6101e57c2e5e739f2", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-20965", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:06:15.900756Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-522", description: "CWE-522 Insufficiently Protected Credentials", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T19:13:54.759Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:48:48.811Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/88a8a98934215f591605028e200b6eca8f7cc45a", }, { url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/bd318b9772759546509f6fdb8648366099dd65ad", }, { url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/0d3cb609b0851ea9e5745cc6101e57c2e5e739f2", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-20965", datePublished: "2023-08-14T20:48:48.811Z", dateReserved: "2022-11-03T22:37:50.595Z", dateUpdated: "2024-10-09T19:13:54.759Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30701
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 14:17
Severity ?
EPSS score ?
Summary
PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.635Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30701", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T14:16:02.434842Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T14:17:50.698Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "HIGH", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 4.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284: Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:48.357Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30701", datePublished: "2023-08-10T01:18:48.357Z", dateReserved: "2023-04-14T01:59:51.128Z", dateUpdated: "2024-10-04T14:17:50.698Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21272
Vulnerability from cvelistv5
Published
2023-08-14 21:01
Modified
2024-10-09 15:14
Severity ?
EPSS score ?
Summary
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.119Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21272", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T15:08:38.155174Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-269", description: "CWE-269 Improper Privilege Management", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T15:14:06.299Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:01:10.248Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21272", datePublished: "2023-08-14T21:01:10.248Z", dateReserved: "2022-11-03T22:37:50.654Z", dateUpdated: "2024-10-09T15:14:06.299Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21286
Vulnerability from cvelistv5
Published
2023-08-14 21:06
Modified
2024-10-09 14:42
Severity ?
EPSS score ?
Summary
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:33.102Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/a65429742caf05205ea7f1c2fdd1119ca652b810", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21286", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:40:47.084796Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:42:17.999Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:06:38.355Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/a65429742caf05205ea7f1c2fdd1119ca652b810", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21286", datePublished: "2023-08-14T21:06:38.355Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:42:17.999Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-22386
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 10:07
Severity ?
EPSS score ?
Summary
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: AR8035 Version: CSR8811 Version: CSRA6620 Version: CSRA6640 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: Flight RB5 5G Platform Version: Immersive Home 214 Platform Version: Immersive Home 216 Platform Version: Immersive Home 316 Platform Version: Immersive Home 318 Platform Version: IPQ5010 Version: IPQ5028 Version: IPQ6000 Version: IPQ6010 Version: IPQ6018 Version: IPQ6028 Version: IPQ8070A Version: IPQ8071A Version: IPQ8072A Version: IPQ8074A Version: IPQ8076 Version: IPQ8076A Version: IPQ8078 Version: IPQ8078A Version: IPQ8173 Version: IPQ8174 Version: IPQ9008 Version: IPQ9574 Version: QAM8255P Version: QAM8295P Version: QAM8650P Version: QAM8775P Version: QCA4024 Version: QCA6174A Version: QCA6391 Version: QCA6421 Version: QCA6426 Version: QCA6431 Version: QCA6436 Version: QCA6554A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6584AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA8072 Version: QCA8075 Version: QCA8081 Version: QCA8082 Version: QCA8084 Version: QCA8085 Version: QCA8337 Version: QCA8386 Version: QCA9377 Version: QCA9888 Version: QCA9889 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM6490 Version: QCN5022 Version: QCN5024 Version: QCN5052 Version: QCN5054 Version: QCN5122 Version: QCN5124 Version: QCN5152 Version: QCN5154 Version: QCN5164 Version: QCN6023 Version: QCN6024 Version: QCN6100 Version: QCN6102 Version: QCN6112 Version: QCN6122 Version: QCN6132 Version: QCN9000 Version: QCN9001 Version: QCN9002 Version: QCN9003 Version: QCN9011 Version: QCN9012 Version: QCN9022 Version: QCN9024 Version: QCN9070 Version: QCN9072 Version: QCN9074 Version: QCN9100 Version: QCN9274 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS4490 Version: QCS610 Version: QCS6490 Version: QCS8250 Version: QRB5165M Version: QRB5165N Version: QSM8250 Version: Qualcomm 215 Mobile Platform Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Qualcomm Video Collaboration VC5 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 8 Gen1 5G Version: SD660 Version: SD865 5G Version: SD888 Version: SDX55 Version: SDX65M Version: SG4150P Version: SM4125 Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 400 Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon AR2 Gen 1 Platform Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon X12 LTE Modem Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: SSG2115P Version: SSG2125P Version: SW5100 Version: SW5100P Version: SXR1230P Version: SXR2130 Version: SXR2230P Version: WCD9326 Version: WCD9335 Version: WCD9341 Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3615 Version: WCN3660B Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ar8035_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csr8811_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6620_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "csra6640_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6200_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6700_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6900_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_7800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "flight_rb5_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_214_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_214_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_216_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_216_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_316_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_316_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:immersive_home_318_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "immersive_home_318_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq5010_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq5028_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq5028_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6010_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6018_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq6028_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8070a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8071a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8072a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8074a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8076_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8076a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8078_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8078_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8078a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8173_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq8174_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq9008_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq9008_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ipq9574_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ipq9574_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8255p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8295p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8650p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qam8775p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca4024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6174a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6391_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6421_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6426_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6431_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6436_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6554a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6564au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574a_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6574au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6584au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6595au_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6696_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6698aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6797aq_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8072_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8075_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8081_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8082_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8082_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8084_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8084_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8085_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8085_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8337_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca8386_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca8386_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9377_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9888_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca9889_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm2290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4325_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4325_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm4490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5022_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5052_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5054_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5054_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5122_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5124_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5124_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5152_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5154_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5154_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn5164_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn5164_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6023_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6102_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6102_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6112_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6112_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6122_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6122_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn6132_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn6132_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9000_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9001_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9001_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9002_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9002_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9003_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9003_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9011_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9012_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9022_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9024_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9070_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9072_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9074_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcn9274_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs2290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs410_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs4290_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs4490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs610_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs6490_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs8250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qrb5165m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qrb5165n_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qsm8250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qsm8250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_215_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_215_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc3_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc5_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "robotics_rb5_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa4150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa4155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa4155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa6155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8145p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8155p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8195p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8255p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sa8295p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd_8_gen1_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd660_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd865_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd888_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx55_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sdx65m_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sdx65m_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sg4150p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sg4150p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm4125_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7250p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7315_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7325p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "smart_audio_400_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_4_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_4_gen_2_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_439_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_439_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_460_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_480_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_660_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_660_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_662_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_680_4g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_690_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_690_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_695_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_750g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_750g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_778g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_780g_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_8_gen_1_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_865_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_888_5g_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_ar2_gen_1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_auto_5g_modem-rf_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x12_lte_modem_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x55_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_x65_5g_modem-rf_system_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_xr2_5g_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ssg2115p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ssg2125p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sw5100p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr1230p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2130_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2230p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9326_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9335_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9341_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9370_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9375_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9385_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3615_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3660b_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3680b_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3910_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3950_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3980_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3988_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn3990_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6740_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8810_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8815_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8830_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8832_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-22386", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-07-11T20:23:06.838482Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-07-11T20:23:20.748Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, { providerMetadata: { dateUpdated: "2024-08-02T10:07:06.733Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "AR8035", }, { status: "affected", version: "CSR8811", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Immersive Home 214 Platform", }, { status: "affected", version: "Immersive Home 216 Platform", }, { status: "affected", version: "Immersive Home 316 Platform", }, { status: "affected", version: "Immersive Home 318 Platform", }, { status: "affected", version: "IPQ5010", }, { status: "affected", version: "IPQ5028", }, { status: "affected", version: "IPQ6000", }, { status: "affected", version: "IPQ6010", }, { status: "affected", version: "IPQ6018", }, { status: "affected", version: "IPQ6028", }, { status: "affected", version: "IPQ8070A", }, { status: "affected", version: "IPQ8071A", }, { status: "affected", version: "IPQ8072A", }, { status: "affected", version: "IPQ8074A", }, { status: "affected", version: "IPQ8076", }, { status: "affected", version: "IPQ8076A", }, { status: "affected", version: "IPQ8078", }, { status: "affected", version: "IPQ8078A", }, { status: "affected", version: "IPQ8173", }, { status: "affected", version: "IPQ8174", }, { status: "affected", version: "IPQ9008", }, { status: "affected", version: "IPQ9574", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QAM8650P", }, { status: "affected", version: "QAM8775P", }, { status: "affected", version: "QCA4024", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6421", }, { status: "affected", version: "QCA6426", }, { status: "affected", version: "QCA6431", }, { status: "affected", version: "QCA6436", }, { status: "affected", version: "QCA6554A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA8072", }, { status: "affected", version: "QCA8075", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8082", }, { status: "affected", version: "QCA8084", }, { status: "affected", version: "QCA8085", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA8386", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCA9888", }, { status: "affected", version: "QCA9889", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "QCM4490", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN5022", }, { status: "affected", version: "QCN5024", }, { status: "affected", version: "QCN5052", }, { status: "affected", version: "QCN5054", }, { status: "affected", version: "QCN5122", }, { status: "affected", version: "QCN5124", }, { status: "affected", version: "QCN5152", }, { status: "affected", version: "QCN5154", }, { status: "affected", version: "QCN5164", }, { status: "affected", version: "QCN6023", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN6100", }, { status: "affected", version: "QCN6102", }, { status: "affected", version: "QCN6112", }, { status: "affected", version: "QCN6122", }, { status: "affected", version: "QCN6132", }, { status: "affected", version: "QCN9000", }, { status: "affected", version: "QCN9001", }, { status: "affected", version: "QCN9002", }, { status: "affected", version: "QCN9003", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9022", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCN9070", }, { status: "affected", version: "QCN9072", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCN9100", }, { status: "affected", version: "QCN9274", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS4490", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QCS8250", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "QSM8250", }, { status: "affected", version: "Qualcomm 215 Mobile Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC5 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDX55", }, { status: "affected", version: "SDX65M", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "SM4125", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 662 Mobile Platform", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "SSG2115P", }, { status: "affected", version: "SSG2125P", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1230P", }, { status: "affected", version: "SXR2130", }, { status: "affected", version: "SXR2230P", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3660B", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-120", description: "CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:02.602Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Buffer Copy Without Checking Size of Input in WLAN HOST", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-22386", datePublished: "2023-07-04T04:46:39.094Z", dateReserved: "2022-12-21T07:26:32.617Z", dateUpdated: "2024-08-02T10:07:06.733Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30699
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-09 19:41
Severity ?
EPSS score ?
Summary
Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.758Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30699", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:41:05.938513Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T19:41:15.794Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:45.379Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30699", datePublished: "2023-08-10T01:18:45.379Z", dateReserved: "2023-04-14T01:59:51.127Z", dateUpdated: "2024-10-09T19:41:15.794Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21242
Vulnerability from cvelistv5
Published
2023-08-14 20:58
Modified
2024-10-09 14:26
Severity ?
EPSS score ?
Summary
In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.123Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21242", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:26:00.372212Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:26:12.319Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:58:52.284Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21242", datePublished: "2023-08-14T20:58:52.284Z", dateReserved: "2022-11-03T22:37:50.652Z", dateUpdated: "2024-10-09T14:26:12.319Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21285
Vulnerability from cvelistv5
Published
2023-08-14 21:06
Modified
2024-10-09 14:43
Severity ?
EPSS score ?
Summary
In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:33.126Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/0c3b7ec3377e7fb645ec366be3be96bb1a252ca1", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21285", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:42:59.984428Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:43:10.844Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:06:23.871Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/0c3b7ec3377e7fb645ec366be3be96bb1a252ca1", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21285", datePublished: "2023-08-14T21:06:23.871Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:43:10.844Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-24851
Vulnerability from cvelistv5
Published
2023-07-04 04:46
Modified
2024-08-02 11:03
Severity ?
EPSS score ?
Summary
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Version: AR8035 Version: CSR8811 Version: CSRA6620 Version: CSRA6640 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: FastConnect 7800 Version: Flight RB5 5G Platform Version: Immersive Home 214 Platform Version: Immersive Home 216 Platform Version: Immersive Home 316 Platform Version: Immersive Home 318 Platform Version: IPQ5010 Version: IPQ5028 Version: IPQ6000 Version: IPQ6010 Version: IPQ6018 Version: IPQ6028 Version: IPQ8070A Version: IPQ8071A Version: IPQ8072A Version: IPQ8074A Version: IPQ8076 Version: IPQ8076A Version: IPQ8078 Version: IPQ8078A Version: IPQ8173 Version: IPQ8174 Version: IPQ9008 Version: IPQ9574 Version: QAM8255P Version: QAM8295P Version: QAM8650P Version: QAM8775P Version: QCA4024 Version: QCA6174A Version: QCA6310 Version: QCA6320 Version: QCA6391 Version: QCA6554A Version: QCA6564AU Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6584AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA6797AQ Version: QCA8072 Version: QCA8075 Version: QCA8081 Version: QCA8082 Version: QCA8084 Version: QCA8085 Version: QCA8337 Version: QCA8386 Version: QCA9377 Version: QCA9888 Version: QCA9889 Version: QCM2290 Version: QCM4290 Version: QCM4325 Version: QCM4490 Version: QCM6490 Version: QCN5022 Version: QCN5024 Version: QCN5052 Version: QCN5054 Version: QCN5122 Version: QCN5124 Version: QCN5152 Version: QCN5154 Version: QCN5164 Version: QCN6023 Version: QCN6024 Version: QCN6122 Version: QCN6132 Version: QCN9000 Version: QCN9001 Version: QCN9002 Version: QCN9003 Version: QCN9011 Version: QCN9012 Version: QCN9022 Version: QCN9024 Version: QCN9070 Version: QCN9072 Version: QCN9074 Version: QCN9100 Version: QCN9274 Version: QCS2290 Version: QCS410 Version: QCS4290 Version: QCS4490 Version: QCS610 Version: QCS6490 Version: QRB5165M Version: QRB5165N Version: QSM8350 Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155P Version: SA8195P Version: SA8255P Version: SA8295P Version: SD 8 Gen1 5G Version: SD660 Version: SD835 Version: SD865 5G Version: SD888 Version: SDX65M Version: SG4150P Version: SM7250P Version: SM7315 Version: SM7325P Version: Smart Audio 400 Platform Version: Snapdragon 4 Gen 1 Mobile Platform Version: Snapdragon 4 Gen 2 Mobile Platform Version: Snapdragon 439 Mobile Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 480 5G Mobile Platform Version: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Version: Snapdragon 660 Mobile Platform Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 695 5G Mobile Platform Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 778G 5G Mobile Platform Version: Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) Version: Snapdragon 780G 5G Mobile Platform Version: Snapdragon 782G Mobile Platform (SM7325-AF) Version: Snapdragon 7c+ Gen 3 Compute Version: Snapdragon 8 Gen 1 Mobile Platform Version: Snapdragon 8+ Gen 1 Mobile Platform Version: Snapdragon 835 Mobile PC Platform Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon 888 5G Mobile Platform Version: Snapdragon 888+ 5G Mobile Platform (SM8350-AC) Version: Snapdragon AR2 Gen 1 Platform Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon X12 LTE Modem Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon X65 5G Modem-RF System Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: SSG2115P Version: SSG2125P Version: SW5100 Version: SW5100P Version: SXR1230P Version: SXR2230P Version: WCD9326 Version: WCD9335 Version: WCD9340 Version: WCD9341 Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3615 Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WCN6740 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8832 Version: WSA8835 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T11:03:19.259Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "AR8035", }, { status: "affected", version: "CSR8811", }, { status: "affected", version: "CSRA6620", }, { status: "affected", version: "CSRA6640", }, { status: "affected", version: "FastConnect 6200", }, { status: "affected", version: "FastConnect 6700", }, { status: "affected", version: "FastConnect 6800", }, { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "Flight RB5 5G Platform", }, { status: "affected", version: "Immersive Home 214 Platform", }, { status: "affected", version: "Immersive Home 216 Platform", }, { status: "affected", version: "Immersive Home 316 Platform", }, { status: "affected", version: "Immersive Home 318 Platform", }, { status: "affected", version: "IPQ5010", }, { status: "affected", version: "IPQ5028", }, { status: "affected", version: "IPQ6000", }, { status: "affected", version: "IPQ6010", }, { status: "affected", version: "IPQ6018", }, { status: "affected", version: "IPQ6028", }, { status: "affected", version: "IPQ8070A", }, { status: "affected", version: "IPQ8071A", }, { status: "affected", version: "IPQ8072A", }, { status: "affected", version: "IPQ8074A", }, { status: "affected", version: "IPQ8076", }, { status: "affected", version: "IPQ8076A", }, { status: "affected", version: "IPQ8078", }, { status: "affected", version: "IPQ8078A", }, { status: "affected", version: "IPQ8173", }, { status: "affected", version: "IPQ8174", }, { status: "affected", version: "IPQ9008", }, { status: "affected", version: "IPQ9574", }, { status: "affected", version: "QAM8255P", }, { status: "affected", version: "QAM8295P", }, { status: "affected", version: "QAM8650P", }, { status: "affected", version: "QAM8775P", }, { status: "affected", version: "QCA4024", }, { status: "affected", version: "QCA6174A", }, { status: "affected", version: "QCA6310", }, { status: "affected", version: "QCA6320", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCA6554A", }, { status: "affected", version: "QCA6564AU", }, { status: "affected", version: "QCA6574", }, { status: "affected", version: "QCA6574A", }, { status: "affected", version: "QCA6574AU", }, { status: "affected", version: "QCA6584AU", }, { status: "affected", version: "QCA6595", }, { status: "affected", version: "QCA6595AU", }, { status: "affected", version: "QCA6696", }, { status: "affected", version: "QCA6698AQ", }, { status: "affected", version: "QCA6797AQ", }, { status: "affected", version: "QCA8072", }, { status: "affected", version: "QCA8075", }, { status: "affected", version: "QCA8081", }, { status: "affected", version: "QCA8082", }, { status: "affected", version: "QCA8084", }, { status: "affected", version: "QCA8085", }, { status: "affected", version: "QCA8337", }, { status: "affected", version: "QCA8386", }, { status: "affected", version: "QCA9377", }, { status: "affected", version: "QCA9888", }, { status: "affected", version: "QCA9889", }, { status: "affected", version: "QCM2290", }, { status: "affected", version: "QCM4290", }, { status: "affected", version: "QCM4325", }, { status: "affected", version: "QCM4490", }, { status: "affected", version: "QCM6490", }, { status: "affected", version: "QCN5022", }, { status: "affected", version: "QCN5024", }, { status: "affected", version: "QCN5052", }, { status: "affected", version: "QCN5054", }, { status: "affected", version: "QCN5122", }, { status: "affected", version: "QCN5124", }, { status: "affected", version: "QCN5152", }, { status: "affected", version: "QCN5154", }, { status: "affected", version: "QCN5164", }, { status: "affected", version: "QCN6023", }, { status: "affected", version: "QCN6024", }, { status: "affected", version: "QCN6122", }, { status: "affected", version: "QCN6132", }, { status: "affected", version: "QCN9000", }, { status: "affected", version: "QCN9001", }, { status: "affected", version: "QCN9002", }, { status: "affected", version: "QCN9003", }, { status: "affected", version: "QCN9011", }, { status: "affected", version: "QCN9012", }, { status: "affected", version: "QCN9022", }, { status: "affected", version: "QCN9024", }, { status: "affected", version: "QCN9070", }, { status: "affected", version: "QCN9072", }, { status: "affected", version: "QCN9074", }, { status: "affected", version: "QCN9100", }, { status: "affected", version: "QCN9274", }, { status: "affected", version: "QCS2290", }, { status: "affected", version: "QCS410", }, { status: "affected", version: "QCS4290", }, { status: "affected", version: "QCS4490", }, { status: "affected", version: "QCS610", }, { status: "affected", version: "QCS6490", }, { status: "affected", version: "QRB5165M", }, { status: "affected", version: "QRB5165N", }, { status: "affected", version: "QSM8350", }, { status: "affected", version: "Qualcomm Video Collaboration VC1 Platform", }, { status: "affected", version: "Qualcomm Video Collaboration VC3 Platform", }, { status: "affected", version: "Robotics RB5 Platform", }, { status: "affected", version: "SA4150P", }, { status: "affected", version: "SA4155P", }, { status: "affected", version: "SA6145P", }, { status: "affected", version: "SA6150P", }, { status: "affected", version: "SA6155P", }, { status: "affected", version: "SA8145P", }, { status: "affected", version: "SA8150P", }, { status: "affected", version: "SA8155P", }, { status: "affected", version: "SA8195P", }, { status: "affected", version: "SA8255P", }, { status: "affected", version: "SA8295P", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SD660", }, { status: "affected", version: "SD835", }, { status: "affected", version: "SD865 5G", }, { status: "affected", version: "SD888", }, { status: "affected", version: "SDX65M", }, { status: "affected", version: "SG4150P", }, { status: "affected", version: "SM7250P", }, { status: "affected", version: "SM7315", }, { status: "affected", version: "SM7325P", }, { status: "affected", version: "Smart Audio 400 Platform", }, { status: "affected", version: "Snapdragon 4 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 4 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 439 Mobile Platform", }, { status: "affected", version: "Snapdragon 460 Mobile Platform", }, { status: "affected", version: "Snapdragon 480 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", }, { status: "affected", version: "Snapdragon 660 Mobile Platform", }, { status: "affected", version: "Snapdragon 680 4G Mobile Platform", }, { status: "affected", version: "Snapdragon 685 4G Mobile Platform (SM6225-AD)", }, { status: "affected", version: "Snapdragon 690 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 695 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 750G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 765 5G Mobile Platform (SM7250-AA)", }, { status: "affected", version: "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", }, { status: "affected", version: "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", }, { status: "affected", version: "Snapdragon 778G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", }, { status: "affected", version: "Snapdragon 780G 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 782G Mobile Platform (SM7325-AF)", }, { status: "affected", version: "Snapdragon 7c+ Gen 3 Compute", }, { status: "affected", version: "Snapdragon 8 Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 1 Mobile Platform", }, { status: "affected", version: "Snapdragon 835 Mobile PC Platform", }, { status: "affected", version: "Snapdragon 865 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", }, { status: "affected", version: "Snapdragon 870 5G Mobile Platform (SM8250-AC)", }, { status: "affected", version: "Snapdragon 888 5G Mobile Platform", }, { status: "affected", version: "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "Snapdragon Auto 5G Modem-RF", }, { status: "affected", version: "Snapdragon W5+ Gen 1 Wearable Platform", }, { status: "affected", version: "Snapdragon X12 LTE Modem", }, { status: "affected", version: "Snapdragon X55 5G Modem-RF System", }, { status: "affected", version: "Snapdragon X65 5G Modem-RF System", }, { status: "affected", version: "Snapdragon XR2 5G Platform", }, { status: "affected", version: "Snapdragon XR2+ Gen 1 Platform", }, { status: "affected", version: "SSG2115P", }, { status: "affected", version: "SSG2125P", }, { status: "affected", version: "SW5100", }, { status: "affected", version: "SW5100P", }, { status: "affected", version: "SXR1230P", }, { status: "affected", version: "SXR2230P", }, { status: "affected", version: "WCD9326", }, { status: "affected", version: "WCD9335", }, { status: "affected", version: "WCD9340", }, { status: "affected", version: "WCD9341", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCN3615", }, { status: "affected", version: "WCN3680B", }, { status: "affected", version: "WCN3910", }, { status: "affected", version: "WCN3950", }, { status: "affected", version: "WCN3980", }, { status: "affected", version: "WCN3988", }, { status: "affected", version: "WCN3990", }, { status: "affected", version: "WCN6740", }, { status: "affected", version: "WSA8810", }, { status: "affected", version: "WSA8815", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, ], }, ], descriptions: [ { lang: "en", value: "Memory Corruption in WLAN HOST while parsing QMI response message from firmware.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-120", description: "CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-04-12T16:25:14.096Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin", }, ], title: "Buffer Copy Without Checking Size of Input in WLAN HOST", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2023-24851", datePublished: "2023-07-04T04:46:42.390Z", dateReserved: "2023-01-31T16:25:23.369Z", dateUpdated: "2024-08-02T11:03:19.259Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30679
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 18:21
Severity ?
EPSS score ?
Summary
Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:51.955Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30679", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T18:20:53.442827Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T18:21:09.995Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "HIGH", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284 Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:21.619Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30679", datePublished: "2023-08-10T01:18:21.619Z", dateReserved: "2023-04-14T01:59:51.121Z", dateUpdated: "2024-10-10T18:21:09.995Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21282
Vulnerability from cvelistv5
Published
2023-08-14 21:05
Modified
2024-10-09 14:48
Severity ?
EPSS score ?
Summary
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.869Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/external/aac/+/4242f97d149b0bf0cd96f00cd1e9d30d5922cd46", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "android", vendor: "google", versions: [ { status: "affected", version: "11", }, { status: "affected", version: "12", }, { status: "affected", version: "12l", }, { status: "affected", version: "13", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-21282", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:46:56.392359Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:48:02.282Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.</p>", }, ], value: "In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Remote code execution", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:05:23.902Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/external/aac/+/4242f97d149b0bf0cd96f00cd1e9d30d5922cd46", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21282", datePublished: "2023-08-14T21:05:23.902Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:48:02.282Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30698
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 14:17
Severity ?
EPSS score ?
Summary
Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:37:14.109Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30698", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T14:16:12.607644Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T14:17:09.597Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284: Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:44.150Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30698", datePublished: "2023-08-10T01:18:44.150Z", dateReserved: "2023-04-14T01:59:51.127Z", dateUpdated: "2024-10-04T14:17:09.597Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21133
Vulnerability from cvelistv5
Published
2023-08-14 20:57
Modified
2024-10-09 19:12
Severity ?
EPSS score ?
Summary
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:25.631Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "PHYSICAL", availabilityImpact: "HIGH", baseScore: 6.8, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-21133", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:01:53.537559Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-862", description: "CWE-862 Missing Authorization", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T19:12:21.313Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:57:57.389Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21133", datePublished: "2023-08-14T20:57:57.389Z", dateReserved: "2022-11-03T22:37:50.639Z", dateUpdated: "2024-10-09T19:12:21.313Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21229
Vulnerability from cvelistv5
Published
2023-08-14 21:11
Modified
2024-10-09 14:10
Severity ?
EPSS score ?
Summary
In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.162Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21229", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:10:31.944336Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:10:40.032Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:11:13.328Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21229", datePublished: "2023-08-14T21:11:13.328Z", dateReserved: "2022-11-03T22:37:50.648Z", dateUpdated: "2024-10-09T14:10:40.032Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30688
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-10 17:19
Severity ?
EPSS score ?
Summary
Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:51.937Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "samsung_mobile_devices", vendor: "samsung_mobile", versions: [ { status: "affected", version: "SMR_Aug_2023_Release 1", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-30688", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-10T17:18:16.848852Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-10T17:19:38.098Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-787 Out-of-bounds Write", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:33.307Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30688", datePublished: "2023-08-10T01:18:33.307Z", dateReserved: "2023-04-14T01:59:51.124Z", dateUpdated: "2024-10-10T17:19:38.098Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-25012
Vulnerability from cvelistv5
Published
2023-02-01 00:00
Modified
2024-08-02 11:11
Severity ?
EPSS score ?
Summary
The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T11:11:43.325Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://seclists.org/oss-sec/2023/q1/53", }, { tags: [ "x_transferred", ], url: "https://lore.kernel.org/all/20230125-hid-unregister-leds-v1-1-9a5192dcef16%40diag.uniroma1.it/", }, { name: "[oss-security] 20230202 Re: Linux Kernel: hid: Use-After-Free in bigben_set_led()", tags: [ "mailing-list", "x_transferred", ], url: "http://www.openwall.com/lists/oss-security/2023/02/02/1", }, { name: "[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update", tags: [ "mailing-list", "x_transferred", ], url: "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html", }, { name: "[oss-security] 20231105 CVE-2023-1078: Linux: rds_rm_zerocopy_callback() bugs", tags: [ "mailing-list", "x_transferred", ], url: "http://www.openwall.com/lists/oss-security/2023/11/05/1", }, { tags: [ "x_transferred", ], url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=76ca8da989c7d97a7f76c75d475fe95a584439d7", }, { tags: [ "x_transferred", ], url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27d2a2fd844ec7da70d19fabb482304fd1e0595b", }, { tags: [ "x_transferred", ], url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2", }, { tags: [ "x_transferred", ], url: "https://bugzilla.suse.com/show_bug.cgi?id=1207560", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2024-03-25T00:42:11.016291", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { url: "https://seclists.org/oss-sec/2023/q1/53", }, { url: "https://lore.kernel.org/all/20230125-hid-unregister-leds-v1-1-9a5192dcef16%40diag.uniroma1.it/", }, { name: "[oss-security] 20230202 Re: Linux Kernel: hid: Use-After-Free in bigben_set_led()", tags: [ "mailing-list", ], url: "http://www.openwall.com/lists/oss-security/2023/02/02/1", }, { name: "[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update", tags: [ "mailing-list", ], url: "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html", }, { name: "[oss-security] 20231105 CVE-2023-1078: Linux: rds_rm_zerocopy_callback() bugs", tags: [ "mailing-list", ], url: "http://www.openwall.com/lists/oss-security/2023/11/05/1", }, { url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=76ca8da989c7d97a7f76c75d475fe95a584439d7", }, { url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27d2a2fd844ec7da70d19fabb482304fd1e0595b", }, { url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2", }, { url: "https://bugzilla.suse.com/show_bug.cgi?id=1207560", }, ], }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2023-25012", datePublished: "2023-02-01T00:00:00", dateReserved: "2023-02-01T00:00:00", dateUpdated: "2024-08-02T11:11:43.325Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2021-29256
Vulnerability from cvelistv5
Published
2021-05-24 17:56
Modified
2025-02-04 19:44
Severity ?
EPSS score ?
Summary
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
References
| ▼ | URL | Tags |
|---|---|---|
| https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver | x_refsource_CONFIRM |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T22:02:51.225Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2021-29256", options: [ { Exploitation: "active", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2025-02-04T19:43:25.118908Z", version: "2.0.3", }, type: "ssvc", }, }, { other: { content: { dateAdded: "2023-07-07", reference: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-29256", }, type: "kev", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-416", description: "CWE-416 Use After Free", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-02-04T19:44:44.324Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: ". The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2021-05-24T17:56:27.000Z", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2021-29256", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: ". The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver", refsource: "CONFIRM", url: "https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2021-29256", datePublished: "2021-05-24T17:56:27.000Z", dateReserved: "2021-03-26T00:00:00.000Z", dateUpdated: "2025-02-04T19:44:44.324Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21279
Vulnerability from cvelistv5
Published
2023-08-14 21:04
Modified
2024-10-09 14:54
Severity ?
EPSS score ?
Summary
In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.891Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/155b14600fb13553a47b4e45fe0acd163da07453", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21279", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:52:13.133704Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:54:26.829Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:04:31.594Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/155b14600fb13553a47b4e45fe0acd163da07453", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21279", datePublished: "2023-08-14T21:04:31.594Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:54:26.829Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2022-42703
Vulnerability from cvelistv5
Published
2022-10-09 00:00
Modified
2024-08-03 13:10
Severity ?
EPSS score ?
Summary
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T13:10:41.240Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=2351", }, { tags: [ "x_transferred", ], url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7", }, { tags: [ "x_transferred", ], url: "https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b", }, { tags: [ "x_transferred", ], url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b", }, { tags: [ "x_transferred", ], url: "https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-12-08T00:00:00", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=2351", }, { url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7", }, { url: "https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b", }, { url: "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b", }, { url: "https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html", }, ], }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2022-42703", datePublished: "2022-10-09T00:00:00", dateReserved: "2022-10-09T00:00:00", dateUpdated: "2024-08-03T13:10:41.240Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-35689
Vulnerability from cvelistv5
Published
2023-08-14 21:09
Modified
2024-10-09 14:22
Severity ?
EPSS score ?
Summary
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T16:30:44.601Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-35689", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:21:45.887440Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:22:00.504Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:09:30.583Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-35689", datePublished: "2023-08-14T21:09:29.953Z", dateReserved: "2023-06-15T02:50:33.963Z", dateUpdated: "2024-10-09T14:22:00.504Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21233
Vulnerability from cvelistv5
Published
2023-08-14 21:10
Modified
2024-10-09 14:18
Severity ?
EPSS score ?
Summary
In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.131Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21233", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:12:34.274145Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:18:23.627Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "11", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Information disclosure", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:10:12.895Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://source.android.com/security/bulletin/wear/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21233", datePublished: "2023-08-14T21:10:12.895Z", dateReserved: "2022-11-03T22:37:50.649Z", dateUpdated: "2024-10-09T14:18:23.627Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-20754
Vulnerability from cvelistv5
Published
2023-07-04 01:44
Modified
2024-12-04 17:20
Severity ?
EPSS score ?
Summary
In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:14:41.000Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://corp.mediatek.com/product-security-bulletin/July-2023", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-20754", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-12-04T17:20:28.578341Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-12-04T17:20:42.540Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797", vendor: "MediaTek, Inc.", versions: [ { status: "affected", version: "Android 11.0, 12.0, 13.0", }, ], }, ], descriptions: [ { lang: "en", value: "In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of Privilege", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-07-04T01:44:02.816Z", orgId: "ee979b05-11f8-4f25-a7e0-a1fa9c190374", shortName: "MediaTek", }, references: [ { url: "https://corp.mediatek.com/product-security-bulletin/July-2023", }, ], }, }, cveMetadata: { assignerOrgId: "ee979b05-11f8-4f25-a7e0-a1fa9c190374", assignerShortName: "MediaTek", cveId: "CVE-2023-20754", datePublished: "2023-07-04T01:44:02.816Z", dateReserved: "2022-10-28T02:03:10.771Z", dateUpdated: "2024-12-04T17:20:42.540Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21278
Vulnerability from cvelistv5
Published
2023-08-14 21:03
Modified
2024-10-09 14:55
Severity ?
EPSS score ?
Summary
In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:36:32.902Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/frameworks/base/+/49773f9d871dd8975128fccf71513928a5a97345", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-21278", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T14:54:58.178478Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-09T14:55:10.669Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T21:03:27.874Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/frameworks/base/+/49773f9d871dd8975128fccf71513928a5a97345", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21278", datePublished: "2023-08-14T21:03:27.874Z", dateReserved: "2022-11-03T22:37:50.655Z", dateUpdated: "2024-10-09T14:55:10.669Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21140
Vulnerability from cvelistv5
Published
2023-08-14 20:58
Modified
2024-10-09 19:10
Severity ?
EPSS score ?
Summary
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:25.713Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-08-01", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "PHYSICAL", availabilityImpact: "HIGH", baseScore: 6.8, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-21140", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-09T19:01:51.514540Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-862", description: "CWE-862 Missing Authorization", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-09T19:10:39.337Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "13", }, { status: "affected", version: "12L", }, { status: "affected", version: "12", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-14T20:58:27.348Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453", }, { url: "https://source.android.com/security/bulletin/2023-08-01", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21140", datePublished: "2023-08-14T20:58:27.348Z", dateReserved: "2022-11-03T22:37:50.640Z", dateUpdated: "2024-10-09T19:10:39.337Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30681
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 15:42
Severity ?
EPSS score ?
Summary
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:51.936Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30681", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T15:40:49.812806Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T15:42:27.207Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.4, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-122 Heap-based Buffer Overflow", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:24.510Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30681", datePublished: "2023-08-10T01:18:24.510Z", dateReserved: "2023-04-14T01:59:51.122Z", dateUpdated: "2024-10-04T15:42:27.207Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-28147
Vulnerability from cvelistv5
Published
2023-06-01 00:00
Modified
2025-01-09 19:34
Severity ?
EPSS score ?
Summary
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T12:30:24.153Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, }, { other: { content: { id: "CVE-2023-28147", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2025-01-09T19:33:43.981183Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { description: "CWE-noinfo Not enough information", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-01-09T19:34:08.975Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-06-01T00:00:00", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { url: "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", }, ], }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2023-28147", datePublished: "2023-06-01T00:00:00", dateReserved: "2023-03-12T00:00:00", dateUpdated: "2025-01-09T19:34:08.975Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-30682
Vulnerability from cvelistv5
Published
2023-08-10 01:18
Modified
2024-10-04 15:42
Severity ?
EPSS score ?
Summary
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:28:51.960Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-30682", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-04T15:40:41.561519Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-04T15:42:45.474Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "affected", product: "Samsung Mobile Devices", vendor: "Samsung Mobile", versions: [ { status: "unaffected", version: "SMR Aug-2023 Release 1", }, ], }, ], descriptions: [ { lang: "en", value: "Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { description: "CWE-284 Improper Access Control", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-10T01:18:25.722Z", orgId: "3af57064-a867-422c-b2ad-40307b65c458", shortName: "Samsung Mobile", }, references: [ { url: "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", }, ], }, }, cveMetadata: { assignerOrgId: "3af57064-a867-422c-b2ad-40307b65c458", assignerShortName: "Samsung Mobile", cveId: "CVE-2023-30682", datePublished: "2023-08-10T01:18:25.722Z", dateReserved: "2023-04-14T01:59:51.122Z", dateUpdated: "2024-10-04T15:42:45.474Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-21255
Vulnerability from cvelistv5
Published
2023-07-12 23:33
Modified
2025-02-13 16:40
Severity ?
EPSS score ?
Summary
In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:28:26.239Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://android.googlesource.com/kernel/common/+/1ca1130ec62d", }, { tags: [ "x_transferred", ], url: "https://source.android.com/security/bulletin/2023-07-01", }, { tags: [ "x_transferred", ], url: "https://www.debian.org/security/2023/dsa-5480", }, { tags: [ "x_transferred", ], url: "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", }, { tags: [ "x_transferred", ], url: "https://security.netapp.com/advisory/ntap-20240119-0010/", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Android", vendor: "Google", versions: [ { status: "affected", version: "Android kernel", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>", }, ], value: "In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", }, ], problemTypes: [ { descriptions: [ { description: "Elevation of privilege", lang: "en", }, ], }, ], providerMetadata: { dateUpdated: "2024-01-19T16:06:47.961Z", orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", shortName: "google_android", }, references: [ { url: "https://android.googlesource.com/kernel/common/+/1ca1130ec62d", }, { url: "https://source.android.com/security/bulletin/2023-07-01", }, { url: "https://www.debian.org/security/2023/dsa-5480", }, { url: "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html", }, { url: "https://security.netapp.com/advisory/ntap-20240119-0010/", }, ], }, }, cveMetadata: { assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", assignerShortName: "google_android", cveId: "CVE-2023-21255", datePublished: "2023-07-12T23:33:00.244Z", dateReserved: "2022-11-03T22:37:50.653Z", dateUpdated: "2025-02-13T16:40:10.760Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.