CVE-2023-21671

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-21671
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.

9.3 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qsm8350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qsm8350:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc3_platform:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_778g_5g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_778g\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_778g\+_5g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_780g_5g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_782g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_782g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_7c\+_gen_3_compute:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_888_5g_mobile_platform:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_888\+_5g_mobile_platform__firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_888\+_5g_mobile_platform_:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:43

Type Values Removed Values Added
References () https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin - Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin - Vendor Advisory
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 9.3

14 Nov 2023, 18:26

Type Values Removed Values Added
CPE cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_782g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_780g_5g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc3_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_888\+_5g_mobile_platform__firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qsm8350:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_778g\+_5g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qsm8350_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_782g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_778g\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_7c\+_gen_3_compute:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_778g_5g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_888_5g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_888\+_5g_mobile_platform_:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*
First Time Qualcomm sd888
Qualcomm fastconnect 6700
Qualcomm fastconnect 6900 Firmware
Qualcomm wcn6740 Firmware
Qualcomm wcd9380
Qualcomm wsa8830
Qualcomm snapdragon 7c\+ Gen 3 Compute Firmware
Qualcomm wcd9385 Firmware
Qualcomm qsm8350
Qualcomm sm7325p
Qualcomm sd888 Firmware
Qualcomm snapdragon 778g\+ 5g Mobile Platform Firmware
Qualcomm snapdragon 780g 5g Mobile Platform
Qualcomm wcd9385
Qualcomm snapdragon 778g 5g Mobile Platform
Qualcomm snapdragon 780g 5g Mobile Platform Firmware
Qualcomm wsa8830 Firmware
Qualcomm qca6391 Firmware
Qualcomm qcs6490
Qualcomm wcd9370
Qualcomm snapdragon 778g 5g Mobile Platform Firmware
Qualcomm wsa8835
Qualcomm qcs6490 Firmware
Qualcomm wcd9380 Firmware
Qualcomm snapdragon 782g Mobile Platform Firmware
Qualcomm wcd9370 Firmware
Qualcomm qca6391
Qualcomm snapdragon 888\+ 5g Mobile Platform
Qualcomm wcn6740
Qualcomm snapdragon 888\+ 5g Mobile Platform Firmware
Qualcomm qcm6490
Qualcomm qsm8350 Firmware
Qualcomm sm7315 Firmware
Qualcomm
Qualcomm snapdragon 782g Mobile Platform
Qualcomm snapdragon 888 5g Mobile Platform
Qualcomm fastconnect 6900
Qualcomm sm7325p Firmware
Qualcomm fastconnect 6700 Firmware
Qualcomm snapdragon 7c\+ Gen 3 Compute
Qualcomm qcm6490 Firmware
Qualcomm wsa8835 Firmware
Qualcomm wcd9375
Qualcomm qualcomm Video Collaboration Vc3 Platform
Qualcomm snapdragon 888 5g Mobile Platform Firmware
Qualcomm wcd9375 Firmware
Qualcomm qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm sm7315
Qualcomm snapdragon 778g\+ 5g Mobile Platform
References () https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin - () https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin - Vendor Advisory
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

07 Nov 2023, 12:14

Type Values Removed Values Added
New CVE
Information

Published : 2023-11-07 06:15

Updated : 2024-11-21 07:43

NVD link : CVE-2023-21671

Mitre link : CVE-2023-21671

CVE.ORG link : CVE-2023-21671

JSON object : View

Products Affected

qualcomm

  • snapdragon_778g_5g_mobile_platform_firmware
  • wsa8830_firmware
  • snapdragon_778g\+_5g_mobile_platform_firmware
  • snapdragon_780g_5g_mobile_platform
  • snapdragon_782g_mobile_platform_firmware
  • snapdragon_888\+_5g_mobile_platform__firmware
  • wcd9385
  • fastconnect_6700
  • snapdragon_782g_mobile_platform
  • wcd9370_firmware
  • wcd9375_firmware
  • snapdragon_888_5g_mobile_platform_firmware
  • qsm8350
  • qualcomm_video_collaboration_vc3_platform_firmware
  • fastconnect_6700_firmware
  • snapdragon_7c\+_gen_3_compute_firmware
  • fastconnect_6900_firmware
  • snapdragon_778g_5g_mobile_platform
  • wsa8835_firmware
  • qca6391
  • wcd9380_firmware
  • sm7325p
  • wcd9385_firmware
  • qsm8350_firmware
  • qcm6490
  • snapdragon_778g\+_5g_mobile_platform
  • qcm6490_firmware
  • wcn6740
  • wsa8830
  • wcd9380
  • fastconnect_6900
  • sd888_firmware
  • snapdragon_888_5g_mobile_platform
  • wcd9370
  • wcd9375
  • snapdragon_7c\+_gen_3_compute
  • qualcomm_video_collaboration_vc3_platform
  • qca6391_firmware
  • qcs6490
  • qcs6490_firmware
  • snapdragon_888\+_5g_mobile_platform_
  • wcn6740_firmware
  • sd888
  • wsa8835
  • sm7325p_firmware
  • sm7315_firmware
  • sm7315
  • snapdragon_780g_5g_mobile_platform_firmware
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo