Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Published May 2, 2023
7.8
HIGHCVSS 3.1
EPSS 0.12%
Description
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
Affected products
-
- Version AR8035StatusaffectedConstraints-
- Version FastConnect 6200StatusaffectedConstraints-
- Version FastConnect 6800StatusaffectedConstraints-
- Version FastConnect 6900StatusaffectedConstraints-
- Version QAM8295PStatusaffectedConstraints-
- Version QCA6391StatusaffectedConstraints-
- Version QCA6421StatusaffectedConstraints-
- Version QCA6426StatusaffectedConstraints-
- Version QCA6431StatusaffectedConstraints-
- Version QCA6436StatusaffectedConstraints-
- Version QCA6574StatusaffectedConstraints-
- Version QCA6574AStatusaffectedConstraints-
- Version QCA6574AUStatusaffectedConstraints-
- Version QCA6595AUStatusaffectedConstraints-
- Version QCA6696StatusaffectedConstraints-
- Version QCA6698AQStatusaffectedConstraints-
- Version QCA8081StatusaffectedConstraints-
- Version QCA8337StatusaffectedConstraints-
- Version QSM8350StatusaffectedConstraints-
- Version SA4150PStatusaffectedConstraints-
- Version SA4155PStatusaffectedConstraints-
- Version SA6145PStatusaffectedConstraints-
- Version SA6150PStatusaffectedConstraints-
- Version SA6155PStatusaffectedConstraints-
- Version SA8145PStatusaffectedConstraints-
- Version SA8150PStatusaffectedConstraints-
- Version SA8155PStatusaffectedConstraints-
- Version SA8195PStatusaffectedConstraints-
- Version SA8295PStatusaffectedConstraints-
- Version SA8540PStatusaffectedConstraints-
- Version SA9000PStatusaffectedConstraints-
- Version SD 8 Gen1 5GStatusaffectedConstraints-
- Version SD865 5GStatusaffectedConstraints-
- Version SM7250PStatusaffectedConstraints-
- Version SXR2130StatusaffectedConstraints-
- Version Snapdragon 765 5G Mobile Platform (SM7250-AA)StatusaffectedConstraints-
- Version Snapdragon 765G 5G Mobile Platform (SM7250-AB)StatusaffectedConstraints-
- Version Snapdragon 768G 5G Mobile Platform (SM7250-AC)StatusaffectedConstraints-
- Version Snapdragon 8 Gen 1 Mobile PlatformStatusaffectedConstraints-
- Version Snapdragon 865 5G Mobile PlatformStatusaffectedConstraints-
- Version Snapdragon 865+ 5G Mobile Platform (SM8250-AB)StatusaffectedConstraints-
- Version Snapdragon 870 5G Mobile Platform (SM8250-AC)StatusaffectedConstraints-
- Version Snapdragon 888 5G Mobile PlatformStatusaffectedConstraints-
- Version Snapdragon 888+ 5G Mobile Platform (SM8350-AC)StatusaffectedConstraints-
- Version Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)StatusaffectedConstraints-
- Version Snapdragon X55 5G Modem-RF SystemStatusaffectedConstraints-
- Version Snapdragon X65 5G Modem-RF SystemStatusaffectedConstraints-
- Version Snapdragon XR2 5G PlatformStatusaffectedConstraints-
- Version WCD9380StatusaffectedConstraints-
- Version WCD9385StatusaffectedConstraints-
- Version WSA8810StatusaffectedConstraints-
- Version WSA8815StatusaffectedConstraints-
- Version WSA8830StatusaffectedConstraints-
- Version WSA8835StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | unaffected |
|
Configuration 1
- n/a
Configuration 2
- n/a
Configuration 3
- n/a
Configuration 4
- n/a
Configuration 5
- n/a
Configuration 6
- n/a
Configuration 7
- n/a
Configuration 8
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Configuration 14
- n/a
Configuration 15
- n/a
Configuration 16
- n/a
Configuration 17
- n/a
Configuration 18
- n/a
Configuration 19
- n/a
Configuration 20
- n/a
Configuration 21
- n/a
Configuration 22
- n/a
Configuration 23
- n/a
Configuration 24
- n/a
Configuration 25
- n/a
Configuration 26
- n/a
Configuration 27
- n/a
Configuration 28
- n/a
Configuration 29
- n/a
Configuration 30
- n/a
Configuration 31
- n/a
Configuration 32
- n/a
Configuration 33
- n/a
Running on/with
- n/a
Configuration 34
- n/a
Configuration 35
- n/a
Configuration 36
- n/a
Configuration 37
- n/a
Configuration 38
- n/a
Configuration 39
- n/a
Configuration 40
- n/a
Configuration 41
- n/a
Configuration 42
- n/a
Configuration 43
- n/a
Configuration 44
- n/a
Configuration 45
Running on/with
- n/a
Configuration 46
Running on/with
- n/a
Configuration 47
Running on/with
- n/a
Configuration 48
Running on/with
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
Configuration 52
- n/a
Configuration 53
- n/a
Configuration 54
- n/a
Configuration 55
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2023–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (6 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 0.12% (0.00116) | 1.44th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.12% (0.00116) | 1.86th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.05% (0.00051) | 13.02th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00044) | 14.58th | v3 (v2023.03.01) |
| Jun 20, 2024 | 0.04% (0.00043) | 9.02th | v3 (v2023.03.01) |
| May 2, 2023 | 0.04% (0.00043) | 7.02th | v3 (v2023.03.01) |
References (1)
| Link | Providers | Tags |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin | Vendor Advisory |
Change history (0)
No recorded changes yet.