CVE-2023-43517

Memory corruption in Automotive Multimedia due to improper access control in HAB.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8650p:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qamsrv1h:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qamsrv1m:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8540p:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8650p:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:srv1h:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:srv1m:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:24

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 8.4
References () https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin - Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin - Vendor Advisory

12 Apr 2024, 16:15

Type Values Removed Values Added
CWE CWE-284

09 Feb 2024, 00:51

Type Values Removed Values Added
CPE cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8650p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:srv1h:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qamsrv1h:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8650p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qamsrv1m:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:srv1m:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8540p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*
First Time Qualcomm qam8775p
Qualcomm srv1h
Qualcomm qca6595 Firmware
Qualcomm qca6698aq
Qualcomm srv1m Firmware
Qualcomm qca6696 Firmware
Qualcomm sa8650p
Qualcomm sa8775p
Qualcomm qca6595
Qualcomm qam8255p Firmware
Qualcomm qamsrv1m Firmware
Qualcomm qamsrv1m
Qualcomm sa8255p
Qualcomm qamsrv1h
Qualcomm sa8540p Firmware
Qualcomm sa8770p
Qualcomm qam8255p
Qualcomm qca6574au
Qualcomm qamsrv1h Firmware
Qualcomm sa8650p Firmware
Qualcomm sa9000p
Qualcomm
Qualcomm qam8295p Firmware
Qualcomm qam8650p Firmware
Qualcomm sa8540p
Qualcomm qam8295p
Qualcomm sa9000p Firmware
Qualcomm sa8775p Firmware
Qualcomm sa8770p Firmware
Qualcomm qam8775p Firmware
Qualcomm sa8255p Firmware
Qualcomm sa8295p Firmware
Qualcomm qca6698aq Firmware
Qualcomm qam8650p
Qualcomm sa8295p
Qualcomm qca6574au Firmware
Qualcomm srv1m
Qualcomm srv1h Firmware
Qualcomm qca6696
CVSS v2 : unknown
v3 : 8.4
v2 : unknown
v3 : 7.8
References () https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin - () https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin - Vendor Advisory
CWE CWE-787

06 Feb 2024, 13:53

Type Values Removed Values Added
Summary
  • (es) Corrupción de la memoria en Automotive Multimedia debido a un control de acceso inadecuado en HAB.

06 Feb 2024, 06:16

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-06 06:16

Updated : 2024-11-21 08:24


NVD link : CVE-2023-43517

Mitre link : CVE-2023-43517

CVE.ORG link : CVE-2023-43517


JSON object : View

Products Affected

qualcomm

  • qca6595_firmware
  • qamsrv1m_firmware
  • qca6574au_firmware
  • qam8255p
  • sa8295p_firmware
  • qam8775p
  • sa9000p
  • sa8775p_firmware
  • sa8650p_firmware
  • qca6574au
  • sa8255p
  • sa8775p
  • srv1m
  • qca6698aq_firmware
  • qamsrv1h
  • qca6696
  • sa8255p_firmware
  • sa8540p
  • qam8295p
  • qam8775p_firmware
  • qamsrv1m
  • qca6696_firmware
  • qca6595
  • qam8650p_firmware
  • qam8295p_firmware
  • sa8770p_firmware
  • srv1h
  • sa8770p
  • sa8540p_firmware
  • srv1m_firmware
  • sa8295p
  • qamsrv1h_firmware
  • sa9000p_firmware
  • sa8650p
  • srv1h_firmware
  • qam8255p_firmware
  • qam8650p
  • qca6698aq
CWE
CWE-284

Improper Access Control

CWE-787

Out-of-bounds Write