ByteOS Network

Vulnerability Details :

CVE-2023-33036

Summary

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-02 Jan, 2024 | 05:38

Updated At-06 Sep, 2024 | 17:55

NULL Pointer Dereference in Hypervisor

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:02 Jan, 2024 | 05:38

Updated At:06 Sep, 2024 | 17:55

▼CVE Numbering Authority (CNA)

NULL Pointer Dereference in Hypervisor

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon

Platforms

Snapdragon Auto
Snapdragon Compute
Snapdragon Consumer IOT
Snapdragon Mobile

Default Status

unaffected

Versions

Affected

AQT1000
AR8035
FastConnect 6200
FastConnect 6800
FastConnect 6900
FastConnect 7800
QAM8255P
QAM8295P
QAM8650P
QAM8775P
QCA6174A
QCA6310
QCA6335
QCA6391
QCA6420
QCA6421
QCA6426
QCA6430
QCA6431
QCA6436
QCA6564A
QCA6564AU
QCA6574
QCA6574A
QCA6574AU
QCA6595
QCA6595AU
QCA6696
QCA6698AQ
QCA6797AQ
QCA8081
QCA8337
QCA9377
QCS8550
QSM8350
Robotics RB3 Platform
SA6145P
SA6155
SA6155P
SA8150P
SA8155
SA8155P
SA8255P
SA8295P
SA8540P
SA9000P
SD 675
SD 8 Gen1 5G
SD 8CX
SD670
SD675
SD855
SD865 5G
SDX55
SDX57M
SM7250P
Snapdragon 670 Mobile Platform
Snapdragon 675 Mobile Platform
Snapdragon 678 Mobile Platform (SM6150-AC)
Snapdragon 765 5G Mobile Platform (SM7250-AA)
Snapdragon 765G 5G Mobile Platform (SM7250-AB)
Snapdragon 768G 5G Mobile Platform (SM7250-AC)
Snapdragon 8 Gen 1 Mobile Platform
Snapdragon 845 Mobile Platform
Snapdragon 850 Mobile Compute Platform
Snapdragon 855 Mobile Platform
Snapdragon 855+/860 Mobile Platform (SM8150-AC)
Snapdragon 865 5G Mobile Platform
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
Snapdragon 870 5G Mobile Platform (SM8250-AC)
Snapdragon 888 5G Mobile Platform
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"
Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
Snapdragon 8cx Compute Platform (SC8180X-AA, AB)
Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"
Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"
Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)
Snapdragon AR2 Gen 1 Platform
Snapdragon X24 LTE Modem
Snapdragon X50 5G Modem-RF System
Snapdragon X55 5G Modem-RF System
Snapdragon X65 5G Modem-RF System
Snapdragon XR2 5G Platform
SSG2115P
SSG2125P
SXR1230P
SXR2130
SXR2230P
Vision Intelligence 300 Platform
Vision Intelligence 400 Platform
WCD9326
WCD9340
WCD9341
WCD9370
WCD9375
WCD9380
WCD9385
WCN3950
WCN3980
WCN3990
WSA8810
WSA8815
WSA8830
WSA8832
WSA8835

Problem Types

Type	CWE ID	Description
CWE	CWE-476	CWE-476 NULL Pointer Dereference

Type: CWE

CWE ID: CWE-476

Description: CWE-476 NULL Pointer Dereference

Metrics

Version	Base score	Base severity	Vector
3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin	N/A

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin	x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:02 Jan, 2024 | 06:15

Updated At:12 Apr, 2024 | 16:15

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CPE Matches

Qualcomm Technologies, Inc.

>>aqt1000_firmware>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>aqt1000>>-

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8035_firmware>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8035>>-

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_6200_firmware>>-

cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_6200>>-

cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_6800_firmware>>-

cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_6800>>-

cpe:2.3:h:qualcomm:fastconnect_6800:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_6900_firmware>>-

cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_6900>>-

cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_7800_firmware>>-

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fastconnect_7800>>-

cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8255p_firmware>>-

cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8255p>>-

cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8295p_firmware>>-

cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8295p>>-

cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8650p_firmware>>-

cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8650p>>-

cpe:2.3:h:qualcomm:qam8650p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8775p_firmware>>-

cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qam8775p>>-

cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6174a_firmware>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6174a>>-

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6310_firmware>>-

cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6310>>-

cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6335_firmware>>-

cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6335>>-

cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6391_firmware>>-

cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6391>>-

cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6420_firmware>>-

cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6420>>-

cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6421_firmware>>-

cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6421>>-

cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6426_firmware>>-

cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6426>>-

cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6430_firmware>>-

cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6430>>-

cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6431_firmware>>-

cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6431>>-

cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6436_firmware>>-

cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6436>>-

cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6564a_firmware>>-

cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6564a>>-

cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6564au_firmware>>-

cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6564au>>-

cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574_firmware>>-

cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574>>-

cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574a_firmware>>-

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574a>>-

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574au_firmware>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574au>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov
CWE-476	Secondary	product-security@qualcomm.com

CWE ID: CWE-476

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-476

Type: Secondary

Source: product-security@qualcomm.com

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

CVE-2023-33036

Credits

NULL Pointer Dereference in Hypervisor

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs