CVE-2023-28575 - Multiple Type Confusion Vulnerability

Back Back to CVE browser

HIGH

Multiple Type Confusion Vulnerability

Published Aug 8, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.12%

Description

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
- Version
  AQT1000
  Status
  affected
  Constraints
  -
- Version
  C-V2X 9150
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6200
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6800
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6900
  Status
  affected
  Constraints
  -
- Version
  FastConnect 7800
  Status
  affected
  Constraints
  -
- Version
  QAM8295P
  Status
  affected
  Constraints
  -
- Version
  QCA6391
  Status
  affected
  Constraints
  -
- Version
  QCA6420
  Status
  affected
  Constraints
  -
- Version
  QCA6426
  Status
  affected
  Constraints
  -
- Version
  QCA6430
  Status
  affected
  Constraints
  -
- Version
  QCA6436
  Status
  affected
  Constraints
  -
- Version
  QCA6574AU
  Status
  affected
  Constraints
  -
- Version
  QCA6696
  Status
  affected
  Constraints
  -
- Version
  QCA8337
  Status
  affected
  Constraints
  -
- Version
  QCN9074
  Status
  affected
  Constraints
  -
- Version
  QCS410
  Status
  affected
  Constraints
  -
- Version
  QCS610
  Status
  affected
  Constraints
  -
- Version
  QCS8155
  Status
  affected
  Constraints
  -
- Version
  Qualcomm 205 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Qualcomm 215 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  SA6145P
  Status
  affected
  Constraints
  -
- Version
  SA6150P
  Status
  affected
  Constraints
  -
- Version
  SA6155P
  Status
  affected
  Constraints
  -
- Version
  SA8145P
  Status
  affected
  Constraints
  -
- Version
  SA8150P
  Status
  affected
  Constraints
  -
- Version
  SA8155P
  Status
  affected
  Constraints
  -
- Version
  SA8195P
  Status
  affected
  Constraints
  -
- Version
  SA8295P
  Status
  affected
  Constraints
  -
- Version
  SD855
  Status
  affected
  Constraints
  -
- Version
  SD865 5G
  Status
  affected
  Constraints
  -
- Version
  SDX55
  Status
  affected
  Constraints
  -
- Version
  SW5100
  Status
  affected
  Constraints
  -
- Version
  SW5100P
  Status
  affected
  Constraints
  -
- Version
  SXR2130
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 210 Processor
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 212 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 8 Gen 1 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 855 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 855+/860 Mobile Platform (SM8150-AC)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 865 5G Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 870 5G Mobile Platform (SM8250-AC)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon W5+ Gen 1 Wearable Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon Wear 4100+ Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon X55 5G Modem-RF System
  Status
  affected
  Constraints
  -
- Version
  Snapdragon XR2 5G Platform
  Status
  affected
  Constraints
  -
- Version
  WCD9341
  Status
  affected
  Constraints
  -
- Version
  WCD9370
  Status
  affected
  Constraints
  -
- Version
  WCD9380
  Status
  affected
  Constraints
  -
- Version
  WCN3610
  Status
  affected
  Constraints
  -
- Version
  WCN3660B
  Status
  affected
  Constraints
  -
- Version
  WCN3680B
  Status
  affected
  Constraints
  -
- Version
  WCN3950
  Status
  affected
  Constraints
  -
- Version
  WCN3980
  Status
  affected
  Constraints
  -
- Version
  WCN3988
  Status
  affected
  Constraints
  -
- Version
  WSA8810
  Status
  affected
  Constraints
  -
- Version
  WSA8815
  Status
  affected
  Constraints
  -
- Version
  WSA8830
  Status
  affected
  Constraints
  -
- Version
  WSA8835
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
AQT1000	affected	-
C-V2X 9150	affected	-
FastConnect 6200	affected	-
FastConnect 6800	affected	-
FastConnect 6900	affected	-
FastConnect 7800	affected	-
QAM8295P	affected	-
QCA6391	affected	-
QCA6420	affected	-
QCA6426	affected	-
QCA6430	affected	-
QCA6436	affected	-
QCA6574AU	affected	-
QCA6696	affected	-
QCA8337	affected	-
QCN9074	affected	-
QCS410	affected	-
QCS610	affected	-
QCS8155	affected	-
Qualcomm 205 Mobile Platform	affected	-
Qualcomm 215 Mobile Platform	affected	-
SA6145P	affected	-
SA6150P	affected	-
SA6155P	affected	-
SA8145P	affected	-
SA8150P	affected	-
SA8155P	affected	-
SA8195P	affected	-
SA8295P	affected	-
SD855	affected	-
SD865 5G	affected	-
SDX55	affected	-
SW5100	affected	-
SW5100P	affected	-
SXR2130	affected	-
Snapdragon 210 Processor	affected	-
Snapdragon 212 Mobile Platform	affected	-
Snapdragon 8 Gen 1 Mobile Platform	affected	-
Snapdragon 855 Mobile Platform	affected	-
Snapdragon 855+/860 Mobile Platform (SM8150-AC)	affected	-
Snapdragon 865 5G Mobile Platform	affected	-
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)	affected	-
Snapdragon 870 5G Mobile Platform (SM8250-AC)	affected	-
Snapdragon W5+ Gen 1 Wearable Platform	affected	-
Snapdragon Wear 4100+ Platform	affected	-
Snapdragon X55 5G Modem-RF System	affected	-
Snapdragon XR2 5G Platform	affected	-
WCD9341	affected	-
WCD9370	affected	-
WCD9380	affected	-
WCN3610	affected	-
WCN3660B	affected	-
WCN3680B	affected	-
WCN3950	affected	-
WCN3980	affected	-
WCN3988	affected	-
WSA8810	affected	-
WSA8815	affected	-
WSA8830	affected	-
WSA8835	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-823

CWE-843

References (1)

https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
PatchVendor Advisory

Link	Providers	Tags
https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published Aug 8, 2023

Updated Aug 2, 2024

Reserved Mar 17, 2023

Link CVE-2023-28575

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-28575

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-28575