CVE-2023-21642

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in HAB Memory management due to broad system privileges via physical address.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonQAM8295P; QCA6574AU; QCA6696; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; SA8295P; SA8540P; SA9000P
qualcommqam8295p_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6696_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsa8295p_firmware<= *
qualcommsa8540p_firmware<= *
qualcommsa9000p_firmware<= *

References

Timeline

Published
May 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216437.8Memory corruption due to untrusted pointer dereference in automotive during system call.CVE-2023-216447.8Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.CVE-2023-216467.5Transient DOS in Modem while processing invalid System Information Block 1.CVE-2023-216476.5Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.CVE-2023-216487.8Memory corruption in RIL while trying to send apdu packet.CVE-2023-216497.8Memory corruption in WLAN while running doDriverCmd for an unspecific command.CVE-2023-216507.8Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.CVE-2023-216517.8Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.CVE-2023-216527.1Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.CVE-2023-216537.5Transient DOS in Modem while processing RRC reconfiguration message.CVE-2023-216547.8Memory corruption in Audio during playback session with audio effects enabled.CVE-2023-216557.8Memory corruption in Audio while validating and mapping metadata.