CVE-2023-22382 — Improper Input Validation in Automotive

Description (CNA)

Weak configuration in Automotive while VM is processing a listener request from TEE.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected APQ8064AU; affected MSM8996AU; affected QAM8295P; affected QAM8650P; affected QAMSRV1H; affected QCA6564A; affected QCA6564AU; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA6698AQ; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8295P; affected SA8540P; affected SA8650P; affected SA9000P; affected Snapdragon 820 Automotive Platform; affected SRV1H

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected APQ8064AU; affected MSM8996AU; affected QAM8295P; affected QAM8650P; affected QAMSRV1H; affected QCA6564A; affected QCA6564AU; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA6698AQ; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8295P; affected SA8540P; affected SA8650P; affected SA9000P; affected Snapdragon 820 Automotive Platform; affected SRV1H

CWE

CWE-20

References

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

ADP enrichment

CVE

No English description supplied.

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

CISA-ADP

No English description supplied.

No references supplied.