CVE-2023-28575
08.08.2023, 10:15
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
| Vendor | Product | Version |
|---|---|---|
| qualcomm | aqt1000_firmware | - |
| qualcomm | c-v2x_9150_firmware | - |
| qualcomm | fastconnect_6200_firmware | - |
| qualcomm | fastconnect_6800_firmware | - |
| qualcomm | fastconnect_6900_firmware | - |
| qualcomm | fastconnect_7800_firmware | - |
| qualcomm | qam8295p_firmware | - |
| qualcomm | qca6391_firmware | - |
| qualcomm | qca6420_firmware | - |
| qualcomm | qca6426_firmware | - |
| qualcomm | qca6430_firmware | - |
| qualcomm | qca6436_firmware | - |
| qualcomm | qca6574au_firmware | - |
| qualcomm | qca6696_firmware | - |
| qualcomm | qca8337_firmware | - |
| qualcomm | qcn9074_firmware | - |
| qualcomm | qcs410_firmware | - |
| qualcomm | qcs610_firmware | - |
| qualcomm | qcs8155_firmware | - |
| qualcomm | 205_firmware | - |
| qualcomm | 215_firmware | - |
| qualcomm | sa6145p_firmware | - |
| qualcomm | sa6150p_firmware | - |
| qualcomm | sa6155p_firmware | - |
| qualcomm | sa8145p_firmware | - |
| qualcomm | sa8150p_firmware | - |
| qualcomm | sa8155p_firmware | - |
| qualcomm | sa8195p_firmware | - |
| qualcomm | sa8295p_firmware | - |
| qualcomm | sd855_firmware | - |
| qualcomm | sd865_5g_firmware | - |
| qualcomm | sdx55_firmware | - |
| qualcomm | sd210_firmware | - |
| qualcomm | sd212_firmware | - |
| qualcomm | snapdragon_8_gen_1_firmware | - |
| qualcomm | snapdragon_855_firmware | - |
| qualcomm | snapdragon_855\+\/860_firmware | - |
| qualcomm | snapdragon_865_5g_firmware | - |
| qualcomm | snapdragon_865\+_5g_firmware | - |
| qualcomm | snapdragon_870_5g_firmware | - |
| qualcomm | snapdragon_w5\+_gen_1_firmware | - |
| qualcomm | snapdragon_wear_4100\+_firmware | - |
| qualcomm | snapdragon_x55_5g_firmware | - |
| qualcomm | snapdragon_xr2_5g_firmware | - |
| qualcomm | sw5100_firmware | - |
| qualcomm | sw5100p_firmware | - |
| qualcomm | sxr2130_firmware | - |
| qualcomm | wcd9341_firmware | - |
| qualcomm | wcd9370_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcn3610_firmware | - |
| qualcomm | wcn3660b_firmware | - |
| qualcomm | wcn3680b_firmware | - |
| qualcomm | wcn3950_firmware | - |
| qualcomm | wcn3980_firmware | - |
| qualcomm | wcn3988_firmware | - |
| qualcomm | wsa8810_firmware | - |
| qualcomm | wsa8815_firmware | - |
| qualcomm | wsa8830_firmware | - |
| qualcomm | wsa8835_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-823 - Use of Out-of-range Pointer OffsetThe program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.