cvelistv5 - cve-2023-33114

CVE-2023-33114 (GCVE-0-2023-33114)

Vulnerability from cvelistv5

Published

2024-01-02 05:38

Modified

2024-11-14 19:23

Severity ?

8.4 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Summary

Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

References

URL

Tags

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Impacted products

	Vendor	Product	Version
	Qualcomm, Inc.	Snapdragon	Version: 315 5G IoT Modem Version: AQT1000 Version: AR8031 Version: AR8035 Version: C-V2X 9150 Version: CSRA6620 Version: CSRA6640 Version: FastConnect 6200 Version: FastConnect 6700 Version: FastConnect 6800 Version: FastConnect 6900 Version: Flight RB5 5G Platform Version: QAM8295P Version: QCA6391 Version: QCA6420 Version: QCA6421 Version: QCA6426 Version: QCA6430 Version: QCA6431 Version: QCA6436 Version: QCA6574 Version: QCA6574A Version: QCA6574AU Version: QCA6595 Version: QCA6595AU Version: QCA6696 Version: QCA6698AQ Version: QCA8337 Version: QCM6125 Version: QCN9011 Version: QCN9012 Version: QCS410 Version: QCS610 Version: QCS6125 Version: QCS6490 Version: QCS8250 Version: QRB5165M Version: QRB5165N Version: Qualcomm Video Collaboration VC1 Platform Version: Qualcomm Video Collaboration VC3 Platform Version: Qualcomm Video Collaboration VC5 Platform Version: Robotics RB5 Platform Version: SA4150P Version: SA4155P Version: SA6145P Version: SA6150P Version: SA6155P Version: SA8145P Version: SA8150P Version: SA8155P Version: SA8195P Version: SA8295P Version: SD660 Version: SD730 Version: SD855 Version: SD865 5G Version: SDX55 Version: SM4125 Version: SM6250 Version: SM7250P Version: Smart Audio 400 Platform Version: Snapdragon 460 Mobile Platform Version: Snapdragon 660 Mobile Platform Version: Snapdragon 662 Mobile Platform Version: Snapdragon 665 Mobile Platform Version: Snapdragon 675 Mobile Platform Version: Snapdragon 678 Mobile Platform (SM6150-AC) Version: Snapdragon 680 4G Mobile Platform Version: Snapdragon 685 4G Mobile Platform (SM6225-AD) Version: Snapdragon 690 5G Mobile Platform Version: Snapdragon 720G Mobile Platform Version: Snapdragon 730 Mobile Platform (SM7150-AA) Version: Snapdragon 730G Mobile Platform (SM7150-AB) Version: Snapdragon 732G Mobile Platform (SM7150-AC) Version: Snapdragon 750G 5G Mobile Platform Version: Snapdragon 765 5G Mobile Platform (SM7250-AA) Version: Snapdragon 765G 5G Mobile Platform (SM7250-AB) Version: Snapdragon 768G 5G Mobile Platform (SM7250-AC) Version: Snapdragon 855 Mobile Platform Version: Snapdragon 855+/860 Mobile Platform (SM8150-AC) Version: Snapdragon 865 5G Mobile Platform Version: Snapdragon 865+ 5G Mobile Platform (SM8250-AB) Version: Snapdragon 870 5G Mobile Platform (SM8250-AC) Version: Snapdragon Auto 5G Modem-RF Version: Snapdragon W5+ Gen 1 Wearable Platform Version: Snapdragon Wear 4100+ Platform Version: Snapdragon X50 5G Modem-RF System Version: Snapdragon X55 5G Modem-RF System Version: Snapdragon XR2 5G Platform Version: Snapdragon XR2+ Gen 1 Platform Version: SW5100 Version: SW5100P Version: SXR2130 Version: WCD9326 Version: WCD9335 Version: WCD9341 Version: WCD9370 Version: WCD9375 Version: WCD9380 Version: WCD9385 Version: WCN3610 Version: WCN3660B Version: WCN3680B Version: WCN3910 Version: WCN3950 Version: WCN3980 Version: WCN3988 Version: WCN3990 Version: WSA8810 Version: WSA8815 Version: WSA8830 Version: WSA8835

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:39:36.122Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-33114",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-10T04:00:06.654058Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-14T19:23:48.673Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Consumer IOT",
            "Snapdragon Industrial IOT",
            "Snapdragon Mobile",
            "Snapdragon Voice \u0026 Music",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "315 5G IoT Modem"
            },
            {
              "status": "affected",
              "version": "AQT1000"
            },
            {
              "status": "affected",
              "version": "AR8031"
            },
            {
              "status": "affected",
              "version": "AR8035"
            },
            {
              "status": "affected",
              "version": "C-V2X 9150"
            },
            {
              "status": "affected",
              "version": "CSRA6620"
            },
            {
              "status": "affected",
              "version": "CSRA6640"
            },
            {
              "status": "affected",
              "version": "FastConnect 6200"
            },
            {
              "status": "affected",
              "version": "FastConnect 6700"
            },
            {
              "status": "affected",
              "version": "FastConnect 6800"
            },
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "Flight RB5 5G Platform"
            },
            {
              "status": "affected",
              "version": "QAM8295P"
            },
            {
              "status": "affected",
              "version": "QCA6391"
            },
            {
              "status": "affected",
              "version": "QCA6420"
            },
            {
              "status": "affected",
              "version": "QCA6421"
            },
            {
              "status": "affected",
              "version": "QCA6426"
            },
            {
              "status": "affected",
              "version": "QCA6430"
            },
            {
              "status": "affected",
              "version": "QCA6431"
            },
            {
              "status": "affected",
              "version": "QCA6436"
            },
            {
              "status": "affected",
              "version": "QCA6574"
            },
            {
              "status": "affected",
              "version": "QCA6574A"
            },
            {
              "status": "affected",
              "version": "QCA6574AU"
            },
            {
              "status": "affected",
              "version": "QCA6595"
            },
            {
              "status": "affected",
              "version": "QCA6595AU"
            },
            {
              "status": "affected",
              "version": "QCA6696"
            },
            {
              "status": "affected",
              "version": "QCA6698AQ"
            },
            {
              "status": "affected",
              "version": "QCA8337"
            },
            {
              "status": "affected",
              "version": "QCM6125"
            },
            {
              "status": "affected",
              "version": "QCN9011"
            },
            {
              "status": "affected",
              "version": "QCN9012"
            },
            {
              "status": "affected",
              "version": "QCS410"
            },
            {
              "status": "affected",
              "version": "QCS610"
            },
            {
              "status": "affected",
              "version": "QCS6125"
            },
            {
              "status": "affected",
              "version": "QCS6490"
            },
            {
              "status": "affected",
              "version": "QCS8250"
            },
            {
              "status": "affected",
              "version": "QRB5165M"
            },
            {
              "status": "affected",
              "version": "QRB5165N"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC1 Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC3 Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC5 Platform"
            },
            {
              "status": "affected",
              "version": "Robotics RB5 Platform"
            },
            {
              "status": "affected",
              "version": "SA4150P"
            },
            {
              "status": "affected",
              "version": "SA4155P"
            },
            {
              "status": "affected",
              "version": "SA6145P"
            },
            {
              "status": "affected",
              "version": "SA6150P"
            },
            {
              "status": "affected",
              "version": "SA6155P"
            },
            {
              "status": "affected",
              "version": "SA8145P"
            },
            {
              "status": "affected",
              "version": "SA8150P"
            },
            {
              "status": "affected",
              "version": "SA8155P"
            },
            {
              "status": "affected",
              "version": "SA8195P"
            },
            {
              "status": "affected",
              "version": "SA8295P"
            },
            {
              "status": "affected",
              "version": "SD660"
            },
            {
              "status": "affected",
              "version": "SD730"
            },
            {
              "status": "affected",
              "version": "SD855"
            },
            {
              "status": "affected",
              "version": "SD865 5G"
            },
            {
              "status": "affected",
              "version": "SDX55"
            },
            {
              "status": "affected",
              "version": "SM4125"
            },
            {
              "status": "affected",
              "version": "SM6250"
            },
            {
              "status": "affected",
              "version": "SM7250P"
            },
            {
              "status": "affected",
              "version": "Smart Audio 400 Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 460 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 660 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 662 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 665 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 675 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 678 Mobile Platform (SM6150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 680 4G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 690 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 720G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 730 Mobile Platform (SM7150-AA)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 730G Mobile Platform (SM7150-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 732G Mobile Platform (SM7150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 750G 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 855 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 865 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon Auto 5G Modem-RF"
            },
            {
              "status": "affected",
              "version": "Snapdragon W5+ Gen 1 Wearable Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon Wear 4100+ Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon X50 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X55 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2 5G Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2+ Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "SW5100"
            },
            {
              "status": "affected",
              "version": "SW5100P"
            },
            {
              "status": "affected",
              "version": "SXR2130"
            },
            {
              "status": "affected",
              "version": "WCD9326"
            },
            {
              "status": "affected",
              "version": "WCD9335"
            },
            {
              "status": "affected",
              "version": "WCD9341"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9385"
            },
            {
              "status": "affected",
              "version": "WCN3610"
            },
            {
              "status": "affected",
              "version": "WCN3660B"
            },
            {
              "status": "affected",
              "version": "WCN3680B"
            },
            {
              "status": "affected",
              "version": "WCN3910"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3980"
            },
            {
              "status": "affected",
              "version": "WCN3988"
            },
            {
              "status": "affected",
              "version": "WCN3990"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            },
            {
              "status": "affected",
              "version": "WSA8830"
            },
            {
              "status": "affected",
              "version": "WSA8835"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-12T16:04:53.360Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin"
        }
      ],
      "title": "Use after free in Neural Processing Unit"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2023-33114",
    "datePublished": "2024-01-02T05:38:46.886Z",
    "dateReserved": "2023-05-17T09:28:53.144Z",
    "dateUpdated": "2024-11-14T19:23:48.673Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T15:39:36.122Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-33114\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-10T04:00:06.654058Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-14T19:23:45.908Z\"}}], \"cna\": {\"title\": \"Use after free in Neural Processing Unit\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.4, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Qualcomm, Inc.\", \"product\": \"Snapdragon\", \"versions\": [{\"status\": \"affected\", \"version\": \"315 5G IoT Modem\"}, {\"status\": \"affected\", \"version\": \"AQT1000\"}, {\"status\": \"affected\", \"version\": \"AR8031\"}, {\"status\": \"affected\", \"version\": \"AR8035\"}, {\"status\": \"affected\", \"version\": \"C-V2X 9150\"}, {\"status\": \"affected\", \"version\": \"CSRA6620\"}, {\"status\": \"affected\", \"version\": \"CSRA6640\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6200\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6700\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6800\"}, {\"status\": \"affected\", \"version\": \"FastConnect 6900\"}, {\"status\": \"affected\", \"version\": \"Flight RB5 5G Platform\"}, {\"status\": \"affected\", \"version\": \"QAM8295P\"}, {\"status\": \"affected\", \"version\": \"QCA6391\"}, {\"status\": \"affected\", \"version\": \"QCA6420\"}, {\"status\": \"affected\", \"version\": \"QCA6421\"}, {\"status\": \"affected\", \"version\": \"QCA6426\"}, {\"status\": \"affected\", \"version\": \"QCA6430\"}, {\"status\": \"affected\", \"version\": \"QCA6431\"}, {\"status\": \"affected\", \"version\": \"QCA6436\"}, {\"status\": \"affected\", \"version\": \"QCA6574\"}, {\"status\": \"affected\", \"version\": \"QCA6574A\"}, {\"status\": \"affected\", \"version\": \"QCA6574AU\"}, {\"status\": \"affected\", \"version\": \"QCA6595\"}, {\"status\": \"affected\", \"version\": \"QCA6595AU\"}, {\"status\": \"affected\", \"version\": \"QCA6696\"}, {\"status\": \"affected\", \"version\": \"QCA6698AQ\"}, {\"status\": \"affected\", \"version\": \"QCA8337\"}, {\"status\": \"affected\", \"version\": \"QCM6125\"}, {\"status\": \"affected\", \"version\": \"QCN9011\"}, {\"status\": \"affected\", \"version\": \"QCN9012\"}, {\"status\": \"affected\", \"version\": \"QCS410\"}, {\"status\": \"affected\", \"version\": \"QCS610\"}, {\"status\": \"affected\", \"version\": \"QCS6125\"}, {\"status\": \"affected\", \"version\": \"QCS6490\"}, {\"status\": \"affected\", \"version\": \"QCS8250\"}, {\"status\": \"affected\", \"version\": \"QRB5165M\"}, {\"status\": \"affected\", \"version\": \"QRB5165N\"}, {\"status\": \"affected\", \"version\": \"Qualcomm Video Collaboration VC1 Platform\"}, {\"status\": \"affected\", \"version\": \"Qualcomm Video Collaboration VC3 Platform\"}, {\"status\": \"affected\", \"version\": \"Qualcomm Video Collaboration VC5 Platform\"}, {\"status\": \"affected\", \"version\": \"Robotics RB5 Platform\"}, {\"status\": \"affected\", \"version\": \"SA4150P\"}, {\"status\": \"affected\", \"version\": \"SA4155P\"}, {\"status\": \"affected\", \"version\": \"SA6145P\"}, {\"status\": \"affected\", \"version\": \"SA6150P\"}, {\"status\": \"affected\", \"version\": \"SA6155P\"}, {\"status\": \"affected\", \"version\": \"SA8145P\"}, {\"status\": \"affected\", \"version\": \"SA8150P\"}, {\"status\": \"affected\", \"version\": \"SA8155P\"}, {\"status\": \"affected\", \"version\": \"SA8195P\"}, {\"status\": \"affected\", \"version\": \"SA8295P\"}, {\"status\": \"affected\", \"version\": \"SD660\"}, {\"status\": \"affected\", \"version\": \"SD730\"}, {\"status\": \"affected\", \"version\": \"SD855\"}, {\"status\": \"affected\", \"version\": \"SD865 5G\"}, {\"status\": \"affected\", \"version\": \"SDX55\"}, {\"status\": \"affected\", \"version\": \"SM4125\"}, {\"status\": \"affected\", \"version\": \"SM6250\"}, {\"status\": \"affected\", \"version\": \"SM7250P\"}, {\"status\": \"affected\", \"version\": \"Smart Audio 400 Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 460 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 660 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 662 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 665 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 675 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 678 Mobile Platform (SM6150-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 680 4G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 690 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 720G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 730 Mobile Platform (SM7150-AA)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 730G Mobile Platform (SM7150-AB)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 732G Mobile Platform (SM7150-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 750G 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 855 Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 865 5G Mobile Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"}, {\"status\": \"affected\", \"version\": \"Snapdragon Auto 5G Modem-RF\"}, {\"status\": \"affected\", \"version\": \"Snapdragon W5+ Gen 1 Wearable Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon Wear 4100+ Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X50 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon X55 5G Modem-RF System\"}, {\"status\": \"affected\", \"version\": \"Snapdragon XR2 5G Platform\"}, {\"status\": \"affected\", \"version\": \"Snapdragon XR2+ Gen 1 Platform\"}, {\"status\": \"affected\", \"version\": \"SW5100\"}, {\"status\": \"affected\", \"version\": \"SW5100P\"}, {\"status\": \"affected\", \"version\": \"SXR2130\"}, {\"status\": \"affected\", \"version\": \"WCD9326\"}, {\"status\": \"affected\", \"version\": \"WCD9335\"}, {\"status\": \"affected\", \"version\": \"WCD9341\"}, {\"status\": \"affected\", \"version\": \"WCD9370\"}, {\"status\": \"affected\", \"version\": \"WCD9375\"}, {\"status\": \"affected\", \"version\": \"WCD9380\"}, {\"status\": \"affected\", \"version\": \"WCD9385\"}, {\"status\": \"affected\", \"version\": \"WCN3610\"}, {\"status\": \"affected\", \"version\": \"WCN3660B\"}, {\"status\": \"affected\", \"version\": \"WCN3680B\"}, {\"status\": \"affected\", \"version\": \"WCN3910\"}, {\"status\": \"affected\", \"version\": \"WCN3950\"}, {\"status\": \"affected\", \"version\": \"WCN3980\"}, {\"status\": \"affected\", \"version\": \"WCN3988\"}, {\"status\": \"affected\", \"version\": \"WCN3990\"}, {\"status\": \"affected\", \"version\": \"WSA8810\"}, {\"status\": \"affected\", \"version\": \"WSA8815\"}, {\"status\": \"affected\", \"version\": \"WSA8830\"}, {\"status\": \"affected\", \"version\": \"WSA8835\"}], \"platforms\": [\"Snapdragon Auto\", \"Snapdragon Compute\", \"Snapdragon Consumer IOT\", \"Snapdragon Industrial IOT\", \"Snapdragon Mobile\", \"Snapdragon Voice \u0026 Music\", \"Snapdragon Wearables\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"shortName\": \"qualcomm\", \"dateUpdated\": \"2024-04-12T16:04:53.360Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-33114\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-11-14T19:23:48.673Z\", \"dateReserved\": \"2023-05-17T09:28:53.144Z\", \"assignerOrgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"datePublished\": \"2024-01-02T05:38:46.886Z\", \"assignerShortName\": \"qualcomm\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2024-AVI-0006

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Google Android. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions 11, 12, 12L, 13, 14 sans le correctif de sécurité du 5 janvier 2024

References

Title

Publication Time

Tags

Bulletin de sécurité Android du 03 janvier 2024	None	vendor-advisory
Bulletin de sécurité Pixel du 03 janvier 2024	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions 11, 12, 12L, 13, 14 sans le correctif de s\u00e9curit\u00e9 du 5 janvier 2024",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-33025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33025"
    },
    {
      "name": "CVE-2024-0015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0015"
    },
    {
      "name": "CVE-2023-48343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48343"
    },
    {
      "name": "CVE-2023-5427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5427"
    },
    {
      "name": "CVE-2024-0019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0019"
    },
    {
      "name": "CVE-2024-0016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0016"
    },
    {
      "name": "CVE-2023-33094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33094"
    },
    {
      "name": "CVE-2023-43514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-43514"
    },
    {
      "name": "CVE-2023-33037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33037"
    },
    {
      "name": "CVE-2023-33111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33111"
    },
    {
      "name": "CVE-2023-21245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21245"
    },
    {
      "name": "CVE-2023-33038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33038"
    },
    {
      "name": "CVE-2023-48342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48342"
    },
    {
      "name": "CVE-2023-33113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33113"
    },
    {
      "name": "CVE-2023-28558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28558"
    },
    {
      "name": "CVE-2024-0023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0023"
    },
    {
      "name": "CVE-2023-33120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33120"
    },
    {
      "name": "CVE-2023-28559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28559"
    },
    {
      "name": "CVE-2023-33014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33014"
    },
    {
      "name": "CVE-2023-33117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33117"
    },
    {
      "name": "CVE-2024-0018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0018"
    },
    {
      "name": "CVE-2024-0021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0021"
    },
    {
      "name": "CVE-2024-0017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0017"
    },
    {
      "name": "CVE-2023-43511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-43511"
    },
    {
      "name": "CVE-2022-33275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33275"
    },
    {
      "name": "CVE-2023-33110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33110"
    },
    {
      "name": "CVE-2023-48351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48351"
    },
    {
      "name": "CVE-2023-33109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33109"
    },
    {
      "name": "CVE-2023-33044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33044"
    },
    {
      "name": "CVE-2023-28548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28548"
    },
    {
      "name": "CVE-2023-48352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48352"
    },
    {
      "name": "CVE-2023-33030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33030"
    },
    {
      "name": "CVE-2023-33062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33062"
    },
    {
      "name": "CVE-2023-33043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33043"
    },
    {
      "name": "CVE-2023-48348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48348"
    },
    {
      "name": "CVE-2023-28560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28560"
    },
    {
      "name": "CVE-2023-28564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28564"
    },
    {
      "name": "CVE-2023-33032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33032"
    },
    {
      "name": "CVE-2023-28565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28565"
    },
    {
      "name": "CVE-2023-28567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28567"
    },
    {
      "name": "CVE-2023-33114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33114"
    },
    {
      "name": "CVE-2023-48350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48350"
    },
    {
      "name": "CVE-2023-33036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33036"
    },
    {
      "name": "CVE-2023-33040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33040"
    },
    {
      "name": "CVE-2023-28583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28583"
    },
    {
      "name": "CVE-2023-33108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33108"
    },
    {
      "name": "CVE-2023-48349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48349"
    },
    {
      "name": "CVE-2023-40085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40085"
    },
    {
      "name": "CVE-2023-32874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32874"
    },
    {
      "name": "CVE-2023-21165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21165"
    },
    {
      "name": "CVE-2023-28557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28557"
    },
    {
      "name": "CVE-2024-0020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-0020"
    },
    {
      "name": "CVE-2023-33112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33112"
    },
    {
      "name": "CVE-2023-33033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-33033"
    },
    {
      "name": "CVE-2023-48341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48341"
    },
    {
      "name": "CVE-2023-4295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4295"
    },
    {
      "name": "CVE-2023-48344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48344"
    },
    {
      "name": "CVE-2023-21651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21651"
    },
    {
      "name": "CVE-2023-32872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32872"
    },
    {
      "name": "CVE-2023-28544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28544"
    },
    {
      "name": "CVE-2023-48340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-48340"
    }
  ],
  "initial_release_date": "2024-01-04T00:00:00",
  "last_revision_date": "2024-01-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0006",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-01-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et\nune \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Android du 03 janvier 2024",
      "url": "https://source.android.com/docs/security/bulletin/2024-01-01?hl=fr"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Pixel du 03 janvier 2024",
      "url": "https://source.android.com/docs/security/bulletin/pixel/2024-01-01?hl=fr"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2023-33114 (GCVE-0-2023-33114)

Vulnerability from cvelistv5

CERTFR-2024-AVI-0006

Vulnerability from certfr_avis

Solution

Tags

Sightings

Nomenclature