CVE-2023-24844 : Memory Corruption in Core while invoking a call to Access Control core library w

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

Published 2023-10-03 06:15:22

Updated 2024-04-12 17:16:55

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionBypassGain privilege

Products affected by CVE-2023-24844

Qualcomm » Qca8081 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8081 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Ar8035 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ar8035 » Version: N/A
Qualcomm » Qca8337 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8337 » Version: N/A
Qualcomm » Qcn6024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6024 » Version: N/A
Qualcomm » Qcn9024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9024 » Version: N/A
Qualcomm » Wcd9370 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9370 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wcn3950 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3950 » Version: N/A
Qualcomm » Wcn3988 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3988 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Wsa8832 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8832 » Version: N/A
Qualcomm » Sg8275p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sg8275p » Version: N/A
Qualcomm » Wcd9390 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9390 » Version: N/A
Qualcomm » Wcd9395 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9395 » Version: N/A
Qualcomm » Wsa8840 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8840 » Version: N/A
Qualcomm » Wsa8845 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845 » Version: N/A
Qualcomm » Wsa8845h Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845h » Version: N/A
Qualcomm » Snapdragon X65 5g Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X65 5g Modem-rf System » Version: N/A
Qualcomm » Snapdragon X70 Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X70 Modem-rf System » Version: N/A
Qualcomm » Qcm4490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm4490 » Version: N/A
Qualcomm » Qcs4490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs4490 » Version: N/A
Qualcomm » Qcs8550 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs8550 » Version: N/A
Qualcomm » Fastconnect 6900 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6900 » Version: N/A
Qualcomm » Fastconnect 6700 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6700 » Version: N/A
Qualcomm » Fastconnect 7800 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 7800 » Version: N/A
Qualcomm » Qcm8550 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm8550 » Version: N/A
Qualcomm » Qdu1000 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qdu1000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qdu1000 » Version: N/A
Qualcomm » Qdu1010 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qdu1010_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qdu1010 » Version: N/A
Qualcomm » Qdu1110 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qdu1110_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qdu1110 » Version: N/A
Qualcomm » Qdu1210 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qdu1210_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qdu1210 » Version: N/A
Qualcomm » Qdx1010 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qdx1010_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qdx1010 » Version: N/A
Qualcomm » Qdx1011 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qdx1011_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qdx1011 » Version: N/A
Qualcomm » Qru1032 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qru1032_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qru1032 » Version: N/A
Qualcomm » Qru1052 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qru1052_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qru1052 » Version: N/A
Qualcomm » Qru1062 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qru1062_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qru1062 » Version: N/A
Qualcomm » Sm8550p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8550p » Version: N/A
Qualcomm » Snapdragon 4 Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 4 Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8 Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8 Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-24844

EPSS FAQ

0.03%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-24844

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	Qualcomm, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-24844

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: product-security@qualcomm.com (Secondary)

References for CVE-2023-24844

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

Security Bulletins | Qualcomm Documentation
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-24844

Products affected by CVE-2023-24844

Exploit prediction scoring system (EPSS) score for CVE-2023-24844

CVSS scores for CVE-2023-24844

CWE ids for CVE-2023-24844

References for CVE-2023-24844