Описание
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Затрагиваемое ПО
Qualcomm 315 5g iot modem firmwareQualcomm 315 5g iot modemQualcomm Apq8017 firmwareQualcomm Apq8017Qualcomm Aqt1000 firmwareQualcomm Aqt1000Qualcomm Ar8031 firmwareQualcomm Ar8031Qualcomm Ar8035 firmwareQualcomm Ar8035Qualcomm C-v2x 9150 firmwareQualcomm C-v2x 9150Qualcomm Csra6620 firmwareQualcomm Csra6620Qualcomm Csra6640 firmwareQualcomm Csra6640Qualcomm Csrb31024 firmwareQualcomm Csrb31024Qualcomm Fastconnect 6200 firmwareQualcomm Fastconnect 6200Qualcomm Fastconnect 6700 firmwareQualcomm Fastconnect 6700Qualcomm Fastconnect 6800 firmwareQualcomm Fastconnect 6800Qualcomm Fastconnect 6900 firmware
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletinhttps://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin