CVE-2023-33046 : Memory corruption in Trusted Execution Environment while deinitializing an objec

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

Published 2024-02-06 06:15:59

Updated 2024-04-12 16:15:18

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-33046

Qualcomm » Qca6574au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574au » Version: N/A
Qualcomm » Qca8081 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8081 » Version: N/A
Qualcomm » Qca6391 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6391 » Version: N/A
Qualcomm » Ar8035 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ar8035 » Version: N/A
Qualcomm » Qca6595 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595 » Version: N/A
Qualcomm » Qca6696 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6696 » Version: N/A
Qualcomm » Qca8337 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8337 » Version: N/A
Qualcomm » Qcn6024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6024 » Version: N/A
Qualcomm » Qcn9012 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9012 » Version: N/A
Qualcomm » Qcn9024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9024 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Qrb5165n Firmware » Version: N/A
cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qrb5165n » Version: N/A
Qualcomm » Sa8540p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8540p » Version: N/A
Qualcomm » Sa9000p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa9000p » Version: N/A
Qualcomm » Qcn9011 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9011 » Version: N/A
Qualcomm » Qrb5165m Firmware » Version: N/A
cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qrb5165m » Version: N/A
Qualcomm » Wsa8832 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8832 » Version: N/A
Qualcomm » Qam8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qam8295p » Version: N/A
Qualcomm » Sa8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8295p » Version: N/A
Qualcomm » Sg8275p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sg8275p » Version: N/A
Qualcomm » Wcd9390 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9390 » Version: N/A
Qualcomm » Wcd9395 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9395 » Version: N/A
Qualcomm » Wsa8840 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8840 » Version: N/A
Qualcomm » Wsa8845 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845 » Version: N/A
Qualcomm » Wsa8845h Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845h » Version: N/A
Qualcomm » Qca6698aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6698aq » Version: N/A
Qualcomm » Ssg2115p Firmware » Version: N/A
cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ssg2115p » Version: N/A
Qualcomm » Ssg2125p Firmware » Version: N/A
cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ssg2125p » Version: N/A
Qualcomm » Sxr1230p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sxr1230p » Version: N/A
Qualcomm » Sxr2230p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sxr2230p » Version: N/A
Qualcomm » Snapdragon Ar2 Gen 1 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon Ar2 Gen 1 Platform » Version: N/A
Qualcomm » Snapdragon X65 5g Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X65 5g Modem-rf System » Version: N/A
Qualcomm » Snapdragon X70 Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X70 Modem-rf System » Version: N/A
Qualcomm » Flight Rb5 5g Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Flight Rb5 5g Platform » Version: N/A
Qualcomm » Snapdragon 8cx Gen 3 Compute Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8cx_gen_3_compute_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8cx Gen 3 Compute Platform » Version: N/A
Qualcomm » Qcs8250 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs8250 » Version: N/A
Qualcomm » Qcs8550 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs8550 » Version: N/A
Qualcomm » Fastconnect 6900 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6900 » Version: N/A
Qualcomm » Fastconnect 7800 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 7800 » Version: N/A
Qualcomm » Qcm8550 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcm8550 » Version: N/A
Qualcomm » Qcs7230 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs7230_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs7230 » Version: N/A
Qualcomm » Qualcomm Video Collaboration Vc5 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qualcomm Video Collaboration Vc5 Platform » Version: N/A
Qualcomm » Robotics Rb5 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Robotics Rb5 Platform » Version: N/A
Qualcomm » Sm8550p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8550p » Version: N/A
Qualcomm » Snapdragon 8 Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8 Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-33046

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 5 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-33046

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.0	HIGH	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	1.0	5.9	NIST	2024-02-09
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	Qualcomm, Inc.	2024-02-06
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-33046

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.
Assigned by:
- nvd@nist.gov (Primary)
- product-security@qualcomm.com (Secondary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-33046

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin

Security Bulletins | Qualcomm Documentation
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-33046

Products affected by CVE-2023-33046

Exploit prediction scoring system (EPSS) score for CVE-2023-33046

CVSS scores for CVE-2023-33046

CWE ids for CVE-2023-33046

References for CVE-2023-33046