Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-28575 EUVD-2023-32245GHSA-32rf-9mpv-rfcv

Multiple Type Confusion Vulnerability

Published Aug 8, 2023 · Updated Aug 2, 2024 · Assigned by qualcomm

Description

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, C-V2X 9150, FastConnect 6200, FastConnect 6800, FastConnect 6900, FastConnect 7800, QAM8295P, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6574AU, QCA6696, QCA8337, QCN9074, QCS410, QCS610, QCS8155, Qualcomm 205 Mobile Platform, Qualcomm 215 Mobile Platform, SA6145P, SA6150P, SA6155P, S… —

Advisories 1

References