CVE-2023-33034 : Memory corruption while parsing the ADSP response command.

Memory corruption while parsing the ADSP response command.

Published 2023-10-03 06:15:28

Updated 2024-04-12 17:17:18

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-33034

Qualcomm » Qca6574au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574au » Version: N/A
Qualcomm » Sa6155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6155p » Version: N/A
Qualcomm » Qcs610 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs610 » Version: N/A
Qualcomm » Qca6391 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6391 » Version: N/A
Qualcomm » Qca6595au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595au » Version: N/A
Qualcomm » Wcd9335 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9335 » Version: N/A
Qualcomm » Wcd9341 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9341 » Version: N/A
Qualcomm » Wcn3998 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3998 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Sa8155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8155p » Version: N/A
Qualcomm » Sm8350 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8350_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8350 » Version: N/A
Qualcomm » Sa6145p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6145p » Version: N/A
Qualcomm » Sa6150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6150p » Version: N/A
Qualcomm » Sa8150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8150p » Version: N/A
Qualcomm » Sa8195p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8195p » Version: N/A
Qualcomm » Qcs410 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs410 » Version: N/A
Qualcomm » Csra6620 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csra6620 » Version: N/A
Qualcomm » Csra6640 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csra6640 » Version: N/A
Qualcomm » Qca6595 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595 » Version: N/A
Qualcomm » Qca6696 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6696 » Version: N/A
Qualcomm » Qcn9012 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9012 » Version: N/A
Qualcomm » Wcd9370 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9370 » Version: N/A
Qualcomm » Wcd9375 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9375 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wcn3950 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3950 » Version: N/A
Qualcomm » Wcn3980 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3980 » Version: N/A
Qualcomm » Wcn3988 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3988 » Version: N/A
Qualcomm » Wcn3991 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3991 » Version: N/A
Qualcomm » Wcn6750 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn6750 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Wcn6740 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn6740 » Version: N/A
Qualcomm » Sd888 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd888 » Version: N/A
Qualcomm » Sa8145p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8145p » Version: N/A
Qualcomm » Sm7325p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325p » Version: N/A
Qualcomm » Sm7315 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7315 » Version: N/A
Qualcomm » Sm7325 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325 » Version: N/A
Qualcomm » Qcm6490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm6490 » Version: N/A
Qualcomm » Qcs6490 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs6490 » Version: N/A
Qualcomm » Sm6375 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm6375_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm6375 » Version: N/A
Qualcomm » Qrb5165n Firmware » Version: N/A
cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qrb5165n » Version: N/A
Qualcomm » Qcn9011 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9011 » Version: N/A
Qualcomm » Qrb5165m Firmware » Version: N/A
cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qrb5165m » Version: N/A
Qualcomm » Sa4150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa4150p » Version: N/A
Qualcomm » Sa4155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa4155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa4155p » Version: N/A
Qualcomm » Qam8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qam8295p » Version: N/A
Qualcomm » Sa8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8295p » Version: N/A
Qualcomm » Sm4375 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm4375_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm4375 » Version: N/A
Qualcomm » Qca6698aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6698aq » Version: N/A
Qualcomm » Wcn685x-1 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn685x-1 » Version: N/A
Qualcomm » Wcn685x-5 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn685x-5 » Version: N/A
Qualcomm » Apq5053-aa Firmware » Version: N/A
cpe:2.3:o:qualcomm:apq5053-aa_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Apq5053-aa » Version: N/A
Qualcomm » Sm4350-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm4350-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm4350-ac » Version: N/A
Qualcomm » Sm7325-ae Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325-ae_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325-ae » Version: N/A
Qualcomm » Sm7350-ab Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7350-ab_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7350-ab » Version: N/A
Qualcomm » Sm7325-af Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7325-af_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7325-af » Version: N/A
Qualcomm » Sm8350-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8350-ac » Version: N/A
Qualcomm » Flight Rb5 5g Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Flight Rb5 5g Platform » Version: N/A
Qualcomm » Snapdragon 7c+ Gen 3 Compute Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 7c+ Gen 3 Compute » Version: N/A
Qualcomm » Qualcomm Video Collaboration Vc3 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qualcomm Video Collaboration Vc3 Platform » Version: N/A
Qualcomm » Robotics Rb5 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Robotics Rb5 Platform » Version: N/A
Qualcomm » Qualcomm Video Collaboration Vc1 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qualcomm Video Collaboration Vc1 Platform » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-33034

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 13 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-33034

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	Qualcomm, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-33034

CWE-195 Signed to Unsigned Conversion Error

The product uses a signed primitive and performs a cast to an unsigned primitive, which can produce an unexpected value if the value of the signed primitive can not be represented using an unsigned primitive.

Assigned by: product-security@qualcomm.com (Secondary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-33034

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

Security Bulletins | Qualcomm Documentation
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-33034

Products affected by CVE-2023-33034

Exploit prediction scoring system (EPSS) score for CVE-2023-33034

CVSS scores for CVE-2023-33034

CWE ids for CVE-2023-33034

References for CVE-2023-33034