CVE-2023-33106: Qualcomm, Inc. Snapdragon, грешка в паметта

Описание

Оригинално описание

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QCA6174A; QCA6391; QCA6426; QCA6436; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6696; QCA6698AQ; QCA6797AQ; QCA8081; QCA8337; QCA9377; QCM2290; QCM4290; QCM4325; QCM4490; QCM5430; QCM6490; QCM8550; QCN6024; QCN9011; QCN9012; QCN9024; QCS2290; QCS410; QCS4290; QCS4490; QCS5430; QCS610; QCS6490; QCS7230; QCS8250; QCS8550; QRB5165M; QRB5165N; Qualcomm 215 Mobile Platform; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; Qualcomm Video Collaboration VC5 Platform; Robotics RB5 Platform; SA4150P; SA4155P; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; SA8255P; SA8295P; SA8770P; SA8775P; SA9000P; SD 8 Gen1 5G; SD660; SD865 5G; SD888; SG4150P; SG8275P; SM4125; SM7250P; SM7315; SM7325P; SM8550P; Smart Audio 400 Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 439 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform (SM4350-AC); Snapdragon 660 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform (SM6225-AD); Snapdragon 690 5G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 750G 5G Mobile Platform; Snapdragon 765 5G Mobile Platform (SM7250-AA); Snapdragon 765G 5G Mobile Platform (SM7250-AB); Snapdragon 768G 5G Mobile Platform (SM7250-AC); Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform (SM7325-AE); Snapdragon 780G 5G Mobile Platform; Snapdragon 782G Mobile Platform (SM7325-AF); Snapdragon 7c+ Gen 3 Compute; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform (SM8250-AB); Snapdragon 870 5G Mobile Platform (SM8250-AC); Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform (SM8350-AC); Snapdragon AR2 Gen 1 Platform; Snapdragon Auto 5G Modem-RF; Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon X12 LTE Modem; Snapdragon X55 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; SSG2115P; SSG2125P; SW5100; SW5100P; SXR1230P; SXR2130; SXR2230P; WCD9326; WCD9335; WCD9341; WCD9370; WCD9375; WCD9380; WCD9385; WCD9390; WCD9395; WCN3615; WCN3660B; WCN3680B; WCN3910; WCN3950; WCN3980; WCN3988; WCN3990; WCN6740; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H
• qualcomm: още 138 продукта, добавени от qualcomm

  ar8035_firmware, csra6620_firmware, csra6640_firmware, fastconnect_6200_firmware, fastconnect_6700_firmware, fastconnect_6800_firmware, fastconnect_6900_firmware, fastconnect_7800_firmware, flight_rb5_5g_platform_firmware, qam8255p_firmware, qam8295p_firmware, qam8650p_firmware, qam8775p_firmware, qca6174a_firmware, qca6391_firmware, qca6426_firmware, qca6436_firmware, qca6574_firmware, qca6574a_firmware, qca6574au_firmware, qca6595_firmware, qca6595au_firmware, qca6696_firmware, qca6698aq_firmware, qca6797aq_firmware, qca8081_firmware, qca8337_firmware, qca9377_firmware, qcm2290_firmware, qcm4290_firmware, qcm4325_firmware, qcm4490_firmware, qcm5430_firmware, qcm6490_firmware, qcm8550_firmware, qcn6024_firmware, qcn9011_firmware, qcn9012_firmware, qcn9024_firmware, qcs2290_firmware, qcs410_firmware, qcs4290_firmware, qcs4490_firmware, qcs5430_firmware, qcs610_firmware, qcs6490_firmware, qcs7230_firmware, qcs8250_firmware, qcs8550_firmware, qrb5165m_firmware, qrb5165n_firmware, qualcomm_215_mobile_platform_firmware, qualcomm_video_collaboration_vc1_platform_firmware, qualcomm_video_collaboration_vc3_platform_firmware, qualcomm_video_collaboration_vc5_platform_firmware, robotics_rb5_platform_firmware, sa4150p_firmware, sa4155p_firmware, sa6145p_firmware, sa6150p_firmware, sa6155p_firmware, sa8145p_firmware, sa8150p_firmware, sa8155p_firmware, sa8195p_firmware, sa8255p_firmware, sa8295p_firmware, sa8770p_firmware, sa8775p_firmware, sa9000p_firmware, sd_8_gen1_5g_firmware, sd660_firmware, sd865_5g_firmware, sd888_firmware, sg4150p_firmware, sg8275p_firmware, sm4125_firmware, sm7250p_firmware, sm7315_firmware, sm7325p_firmware, sm8550p_firmware, smart_audio_400_platform_firmware, snapdragon_4_gen_1_mobile_platform_firmware, snapdragon_4_gen_2_mobile_platform_firmware, snapdragon_439_mobile_platform_firmware, snapdragon_460_mobile_platform_firmware, snapdragon_480_5g_mobile_platform_firmware, snapdragon_660_mobile_platform_firmware, snapdragon_662_mobile_platform_firmware, snapdragon_680_4g_mobile_platform_firmware, snapdragon_690_5g_mobile_platform_firmware, snapdragon_695_5g_mobile_platform_firmware, snapdragon_750g_5g_mobile_platform_firmware, snapdragon_778g_5g_mobile_platform_firmware, snapdragon_780g_5g_mobile_platform_firmware, snapdragon_8_gen_1_mobile_platform_firmware, snapdragon_8_gen_2_mobile_platform_firmware, snapdragon_865_5g_mobile_platform_firmware, snapdragon_888_5g_mobile_platform_firmware, snapdragon_ar2_gen_1_platform_firmware, snapdragon_auto_5g_modem-rf_firmware, snapdragon_x12_lte_modem_firmware, snapdragon_x55_5g_modem-rf_system_firmware, snapdragon_x65_5g_modem-rf_system_firmware, snapdragon_xr2_5g_platform_firmware, ssg2115p_firmware, ssg2125p_firmware, sw5100_firmware, sw5100p_firmware, sxr1230p_firmware, sxr2130_firmware, sxr2230p_firmware, wcd9326_firmware, wcd9335_firmware, wcd9341_firmware, wcd9370_firmware, wcd9375_firmware, wcd9380_firmware, wcd9385_firmware, wcd9390_firmware, wcd9395_firmware, wcn3615_firmware, wcn3660b_firmware, wcn3680b_firmware, wcn3910_firmware, wcn3950_firmware, wcn3980_firmware, wcn3988_firmware, wcn3990_firmware, wcn6740_firmware, wsa8810_firmware, wsa8815_firmware, wsa8830_firmware, wsa8832_firmware, wsa8835_firmware, wsa8840_firmware, wsa8845_firmware, wsa8845h_firmware

Вид слабост

• CWE-823 Use of Out-of-range Pointer Offset

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-33106
• https://nvd.nist.gov/vuln/detail/CVE-2023-33106
• https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33106