CVE-2023-43513 — Use of Out-of-range Pointer Offset in PCIe

Description (CNA)

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected 315 5G IoT Modem; affected APQ8017; affected AQT1000; affected AR8031; affected AR8035; affected C-V2X 9150; affected CSRA6620; affected CSRA6640; affected CSRB31024; affected FastConnect 6200; affected FastConnect 6700; affected FastConnect 6800; affected FastConnect 6900; affected FastConnect 7800; affected Flight RB5 5G Platform; affected FSM20055; affected FSM20056; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5010; affected IPQ6018; affected IPQ8074A; affected IPQ8174; affected IPQ9574; affected MDM9628; affected QAM8255P; affected QAM8295P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA4024; affected QCA6174A; affected QCA6310; affected QCA6335; affected QCA6391; affected QCA6420; affected QCA6421; affected QCA6426; affected QCA6430; affected QCA6431; affected QCA6436; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected QCA6797AQ; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA8337; affected QCA9377; affected QCC710; affected QCM2290; affected QCM4290; affected QCM4325; affected QCM4490; affected QCM6125; affected QCM6490; affected QCM8550; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5122; affected QCN5152; affected QCN6024; affected QCN6224; affected QCN6274; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9011; affected QCN9012; affected QCN9024; affected QCN9074; affected QCN9274; affected QCS2290; affected QCS410; affected QCS4290; affected QCS4490; affected QCS610; affected QCS6125; affected QCS6490; affected QCS7230; affected QCS8155; affected QCS8250; affected QCS8550; affected QDU1000; affected QDU1010; affected QDU1110; affected QDU1210; affected QDX1010; affected QDX1011; affected QEP8111; affected QFW7114; affected QFW7124; affected QRB5165M; affected QRB5165N; affected QRU1032; affected QRU1052; affected QRU1062; affected QSM8350; affected Qualcomm 205 Mobile Platform; affected Qualcomm 215 Mobile Platform; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected Qualcomm Video Collaboration VC5 Platform; affected Robotics RB3 Platform; affected Robotics RB5 Platform; affected SA4150P; affected SA4155P; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected SD 8 Gen1 5G; affected SD626; affected SD660; affected SD670; affected SD730; affected SD855; affected SD865 5G; affected SD888; affected SDM429W; affected SDX55; affected SG4150P; affected SG8275P; affected SM4125; affected SM6250; affected SM7250P; affected SM7315; affected SM7325P; affected SM8550P; affected Smart Audio 400 Platform; affected Smart Display 200 Platform (APQ5053-AA); affected Snapdragon 210 Processor; affected Snapdragon 212 Mobile Platform; affected Snapdragon 4 Gen 1 Mobile Platform; affected Snapdragon 4 Gen 2 Mobile Platform; affected Snapdragon 425 Mobile Platform; affected Snapdragon 429 Mobile Platform; affected Snapdragon 439 Mobile Platform; affected Snapdragon 460 Mobile Platform; affected Snapdragon 480 5G Mobile Platform; affected Snapdragon 480+ 5G Mobile Platform (SM4350-AC); affected Snapdragon 625 Mobile Platform; affected Snapdragon 626 Mobile Platform; affected Snapdragon 632 Mobile Platform; affected Snapdragon 660 Mobile Platform; affected Snapdragon 662 Mobile Platform; affected Snapdragon 665 Mobile Platform; affected Snapdragon 670 Mobile Platform; affected Snapdragon 675 Mobile Platform; affected Snapdragon 678 Mobile Platform (SM6150-AC); affected Snapdragon 680 4G Mobile Platform; affected Snapdragon 685 4G Mobile Platform (SM6225-AD); affected Snapdragon 690 5G Mobile Platform; affected Snapdragon 695 5G Mobile Platform; affected Snapdragon 710 Mobile Platform; affected Snapdragon 720G Mobile Platform; affected Snapdragon 730 Mobile Platform (SM7150-AA); affected Snapdragon 730G Mobile Platform (SM7150-AB); affected Snapdragon 732G Mobile Platform (SM7150-AC); affected Snapdragon 750G 5G Mobile Platform; affected Snapdragon 765 5G Mobile Platform (SM7250-AA); affected Snapdragon 765G 5G Mobile Platform (SM7250-AB); affected Snapdragon 768G 5G Mobile Platform (SM7250-AC); affected Snapdragon 778G 5G Mobile Platform; affected Snapdragon 778G+ 5G Mobile Platform (SM7325-AE); affected Snapdragon 780G 5G Mobile Platform; affected Snapdragon 782G Mobile Platform (SM7325-AF); affected Snapdragon 7c+ Gen 3 Compute; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 8 Gen 2 Mobile Platform; affected Snapdragon 8+ Gen 1 Mobile Platform; affected Snapdragon 8+ Gen 2 Mobile Platform; affected Snapdragon 845 Mobile Platform; affected Snapdragon 855 Mobile Platform; affected Snapdragon 855+/860 Mobile Platform (SM8150-AC); affected Snapdragon 865 5G Mobile Platform; affected Snapdragon 865+ 5G Mobile Platform (SM8250-AB); affected Snapdragon 870 5G Mobile Platform (SM8250-AC); affected Snapdragon 888 5G Mobile Platform; affected Snapdragon 888+ 5G Mobile Platform (SM8350-AC); affected Snapdragon AR2 Gen 1 Platform; affected Snapdragon Auto 5G Modem-RF; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon W5+ Gen 1 Wearable Platform; affected Snapdragon Wear 4100+ Platform; affected Snapdragon X12 LTE Modem; affected Snapdragon X35 5G Modem-RF System; affected Snapdragon X50 5G Modem-RF System; affected Snapdragon X55 5G Modem-RF System; affected Snapdragon X65 5G Modem-RF System; affected Snapdragon X75 5G Modem-RF System; affected Snapdragon XR1 Platform; affected Snapdragon XR2 5G Platform; affected Snapdragon XR2+ Gen 1 Platform; affected Snapdragon Auto 4G Modem; affected SRV1H; affected SRV1M; affected SSG2115P; affected SSG2125P; affected SW5100; affected SW5100P; affected SXR1120; affected SXR1230P; affected SXR2130; affected SXR2230P; affected Vision Intelligence 100 Platform (APQ8053-AA); affected Vision Intelligence 200 Platform (APQ8053-AC); affected Vision Intelligence 400 Platform; affected WCD9326; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9360; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCD9390; affected WCD9395; affected WCN3610; affected WCN3615; affected WCN3620; affected WCN3660B; affected WCN3680; affected WCN3680B; affected WCN3910; affected WCN3950; affected WCN3980; affected WCN3988; affected WCN3990; affected WCN6740; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8832; affected WSA8835; affected WSA8840; affected WSA8845; affected WSA8845H

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected 315 5G IoT Modem; affected APQ8017; affected AQT1000; affected AR8031; affected AR8035; affected C-V2X 9150; affected CSRA6620; affected CSRA6640; affected CSRB31024; affected FastConnect 6200; affected FastConnect 6700; affected FastConnect 6800; affected FastConnect 6900; affected FastConnect 7800; affected Flight RB5 5G Platform; affected FSM20055; affected FSM20056; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected Immersive Home 3210 Platform; affected Immersive Home 326 Platform; affected IPQ5010; affected IPQ6018; affected IPQ8074A; affected IPQ8174; affected IPQ9574; affected MDM9628; affected QAM8255P; affected QAM8295P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA4024; affected QCA6174A; affected QCA6310; affected QCA6335; affected QCA6391; affected QCA6420; affected QCA6421; affected QCA6426; affected QCA6430; affected QCA6431; affected QCA6436; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6688AQ; affected QCA6696; affected QCA6698AQ; affected QCA6797AQ; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA8337; affected QCA9377; affected QCC710; affected QCM2290; affected QCM4290; affected QCM4325; affected QCM4490; affected QCM6125; affected QCM6490; affected QCM8550; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5122; affected QCN5152; affected QCN6024; affected QCN6224; affected QCN6274; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9011; affected QCN9012; affected QCN9024; affected QCN9074; affected QCN9274; affected QCS2290; affected QCS410; affected QCS4290; affected QCS4490; affected QCS610; affected QCS6125; affected QCS6490; affected QCS7230; affected QCS8155; affected QCS8250; affected QCS8550; affected QDU1000; affected QDU1010; affected QDU1110; affected QDU1210; affected QDX1010; affected QDX1011; affected QEP8111; affected QFW7114; affected QFW7124; affected QRB5165M; affected QRB5165N; affected QRU1032; affected QRU1052; affected QRU1062; affected QSM8350; affected Qualcomm 205 Mobile Platform; affected Qualcomm 215 Mobile Platform; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected Qualcomm Video Collaboration VC5 Platform; affected Robotics RB3 Platform; affected Robotics RB5 Platform; affected SA4150P; affected SA4155P; affected SA6145P; affected SA6150P; affected SA6155; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155; affected SA8155P; affected SA8195P; affected SA8255P; affected SA8295P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected SD 8 Gen1 5G; affected SD626; affected SD660; affected SD670; affected SD730; affected SD855; affected SD865 5G; affected SD888; affected SDM429W; affected SDX55; affected SG4150P; affected SG8275P; affected SM4125; affected SM6250; affected SM7250P; affected SM7315; affected SM7325P; affected SM8550P; affected Smart Audio 400 Platform; affected Smart Display 200 Platform (APQ5053-AA); affected Snapdragon 210 Processor; affected Snapdragon 212 Mobile Platform; affected Snapdragon 4 Gen 1 Mobile Platform; affected Snapdragon 4 Gen 2 Mobile Platform; affected Snapdragon 425 Mobile Platform; affected Snapdragon 429 Mobile Platform; affected Snapdragon 439 Mobile Platform; affected Snapdragon 460 Mobile Platform; affected Snapdragon 480 5G Mobile Platform; affected Snapdragon 480+ 5G Mobile Platform (SM4350-AC); affected Snapdragon 625 Mobile Platform; affected Snapdragon 626 Mobile Platform; affected Snapdragon 632 Mobile Platform; affected Snapdragon 660 Mobile Platform; affected Snapdragon 662 Mobile Platform; affected Snapdragon 665 Mobile Platform; affected Snapdragon 670 Mobile Platform; affected Snapdragon 675 Mobile Platform; affected Snapdragon 678 Mobile Platform (SM6150-AC); affected Snapdragon 680 4G Mobile Platform; affected Snapdragon 685 4G Mobile Platform (SM6225-AD); affected Snapdragon 690 5G Mobile Platform; affected Snapdragon 695 5G Mobile Platform; affected Snapdragon 710 Mobile Platform; affected Snapdragon 720G Mobile Platform; affected Snapdragon 730 Mobile Platform (SM7150-AA); affected Snapdragon 730G Mobile Platform (SM7150-AB); affected Snapdragon 732G Mobile Platform (SM7150-AC); affected Snapdragon 750G 5G Mobile Platform; affected Snapdragon 765 5G Mobile Platform (SM7250-AA); affected Snapdragon 765G 5G Mobile Platform (SM7250-AB); affected Snapdragon 768G 5G Mobile Platform (SM7250-AC); affected Snapdragon 778G 5G Mobile Platform; affected Snapdragon 778G+ 5G Mobile Platform (SM7325-AE); affected Snapdragon 780G 5G Mobile Platform; affected Snapdragon 782G Mobile Platform (SM7325-AF); affected Snapdragon 7c+ Gen 3 Compute; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 8 Gen 2 Mobile Platform; affected Snapdragon 8+ Gen 1 Mobile Platform; affected Snapdragon 8+ Gen 2 Mobile Platform; affected Snapdragon 845 Mobile Platform; affected Snapdragon 855 Mobile Platform; affected Snapdragon 855+/860 Mobile Platform (SM8150-AC); affected Snapdragon 865 5G Mobile Platform; affected Snapdragon 865+ 5G Mobile Platform (SM8250-AB); affected Snapdragon 870 5G Mobile Platform (SM8250-AC); affected Snapdragon 888 5G Mobile Platform; affected Snapdragon 888+ 5G Mobile Platform (SM8350-AC); affected Snapdragon AR2 Gen 1 Platform; affected Snapdragon Auto 5G Modem-RF; affected Snapdragon Auto 5G Modem-RF Gen 2; affected Snapdragon W5+ Gen 1 Wearable Platform; affected Snapdragon Wear 4100+ Platform; affected Snapdragon X12 LTE Modem; affected Snapdragon X35 5G Modem-RF System; affected Snapdragon X50 5G Modem-RF System; affected Snapdragon X55 5G Modem-RF System; affected Snapdragon X65 5G Modem-RF System; affected Snapdragon X75 5G Modem-RF System; affected Snapdragon XR1 Platform; affected Snapdragon XR2 5G Platform; affected Snapdragon XR2+ Gen 1 Platform; affected Snapdragon Auto 4G Modem; affected SRV1H; affected SRV1M; affected SSG2115P; affected SSG2125P; affected SW5100; affected SW5100P; affected SXR1120; affected SXR1230P; affected SXR2130; affected SXR2230P; affected Vision Intelligence 100 Platform (APQ8053-AA); affected Vision Intelligence 200 Platform (APQ8053-AC); affected Vision Intelligence 400 Platform; affected WCD9326; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9360; affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCD9390; affected WCD9395; affected WCN3610; affected WCN3615; affected WCN3620; affected WCN3660B; affected WCN3680; affected WCN3680B; affected WCN3910; affected WCN3950; affected WCN3980; affected WCN3988; affected WCN3990; affected WCN6740; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8832; affected WSA8835; affected WSA8840; affected WSA8845; affected WSA8845H

CWE

CWE-823

References

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin

ADP enrichment

CVE

No English description supplied.

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin

CISA-ADP

No English description supplied.

No references supplied.