Skip to content
OpenAdvisories
Medium · 6.0 CVE-2023-28586 EUVD-2023-32256GHSA-3v52-wmx3-8w9p

Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS

Published Dec 5, 2023 · Updated Dec 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, 9205 LTE Modem, AQT1000, AR8031, AR8035, C-V2X 9150, CSR8811, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, FSM10056, Home Hub 100 Platform, Immersive Home 3210 Platform, Immersive H… —

Advisories 1

References