CVE-2023-21641

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An app with non-privileged access can change global system brightness and cause undesired system behavior.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6900; FastConnect 7800; QCA6574AU; QCA6696; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; Snapdragon 8 Gen 1 Mobile Platform; WCD9380; WSA8830; WSA8835

References

Timeline

Published
Jul 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216427.8Memory corruption in HAB Memory management due to broad system privileges via physical address.CVE-2023-216437.8Memory corruption due to untrusted pointer dereference in automotive during system call.CVE-2023-216447.8Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.CVE-2023-216467.5Transient DOS in Modem while processing invalid System Information Block 1.CVE-2023-216476.5Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.CVE-2023-216487.8Memory corruption in RIL while trying to send apdu packet.CVE-2023-216497.8Memory corruption in WLAN while running doDriverCmd for an unspecific command.CVE-2023-216507.8Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.CVE-2023-216517.8Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.CVE-2023-216527.1Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.CVE-2023-216537.5Transient DOS in Modem while processing RRC reconfiguration message.CVE-2023-216547.8Memory corruption in Audio during playback session with audio effects enabled.
CVE-2023-21641: High severity, CVSS 7.8 | Vulnix