Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-21650 EUVD-2023-25817GHSA-rqxq-mc37-wq3m

Improper Validation of Array Index in GPS HLOS Driver

Published Aug 8, 2023 · Updated Aug 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, CSRB31024, QAM8295P, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6564, QCA6564AU, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCC5100, QCS410, QCS610, SA415M, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155P, SA8195P, SA8295P, SD855, SD865 5G, SD870, SDA429W, SDX55M, SDXR2 5G… —

Advisories 1

References