CVE-2023-21667

Buffer Over-read in Bluetooth HOST

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

Vulnerabilidad de denegación de servicios (DoS) transitorio en Bluetooth HOST al pasar el descriptor para validar el teclado BT de la lista negra.

*Credits: N/A

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-12-07 CVE Reserved
2023-09-05 CVE Published
2023-09-09 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-125: Out-of-bounds Read
CWE-126: Buffer Over-read

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin	2024-04-12

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"	Qca6390 Firmware Search vendor "Qualcomm" for product "Qca6390 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6390 Search vendor "Qualcomm" for product "Qca6390"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qca6391 Firmware Search vendor "Qualcomm" for product "Qca6391 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6391 Search vendor "Qualcomm" for product "Qca6391"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qca6426 Firmware Search vendor "Qualcomm" for product "Qca6426 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6426 Search vendor "Qualcomm" for product "Qca6426"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qca6436 Firmware Search vendor "Qualcomm" for product "Qca6436 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6436 Search vendor "Qualcomm" for product "Qca6436"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qca6574au Firmware Search vendor "Qualcomm" for product "Qca6574au Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6574au Search vendor "Qualcomm" for product "Qca6574au"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qca6595au Firmware Search vendor "Qualcomm" for product "Qca6595au Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6595au Search vendor "Qualcomm" for product "Qca6595au"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qca6696 Firmware Search vendor "Qualcomm" for product "Qca6696 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qca6696 Search vendor "Qualcomm" for product "Qca6696"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcc5100 Firmware Search vendor "Qualcomm" for product "Qcc5100 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcc5100 Search vendor "Qualcomm" for product "Qcc5100"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcn9074 Firmware Search vendor "Qualcomm" for product "Qcn9074 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcn9074 Search vendor "Qualcomm" for product "Qcn9074"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcs410 Firmware Search vendor "Qualcomm" for product "Qcs410 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcs410 Search vendor "Qualcomm" for product "Qcs410"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Qcs610 Firmware Search vendor "Qualcomm" for product "Qcs610 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Qcs610 Search vendor "Qualcomm" for product "Qcs610"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa6145p Firmware Search vendor "Qualcomm" for product "Sa6145p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa6145p Search vendor "Qualcomm" for product "Sa6145p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa6150p Firmware Search vendor "Qualcomm" for product "Sa6150p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa6150p Search vendor "Qualcomm" for product "Sa6150p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa6155p Firmware Search vendor "Qualcomm" for product "Sa6155p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa6155p Search vendor "Qualcomm" for product "Sa6155p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa8145p Firmware Search vendor "Qualcomm" for product "Sa8145p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa8145p Search vendor "Qualcomm" for product "Sa8145p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa8150p Firmware Search vendor "Qualcomm" for product "Sa8150p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa8150p Search vendor "Qualcomm" for product "Sa8150p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa8155p Firmware Search vendor "Qualcomm" for product "Sa8155p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa8155p Search vendor "Qualcomm" for product "Sa8155p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sa8195p Firmware Search vendor "Qualcomm" for product "Sa8195p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sa8195p Search vendor "Qualcomm" for product "Sa8195p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 8 Gen1 5g Firmware Search vendor "Qualcomm" for product "Sd 8 Gen1 5g Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 8 Gen1 5g Search vendor "Qualcomm" for product "Sd 8 Gen1 5g"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd865 5g Firmware Search vendor "Qualcomm" for product "Sd865 5g Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd865 5g Search vendor "Qualcomm" for product "Sd865 5g"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd870 Firmware Search vendor "Qualcomm" for product "Sd870 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd870 Search vendor "Qualcomm" for product "Sd870"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sdx55m Firmware Search vendor "Qualcomm" for product "Sdx55m Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sdx55m Search vendor "Qualcomm" for product "Sdx55m"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sdxr2 5g Firmware Search vendor "Qualcomm" for product "Sdxr2 5g Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sdxr2 5g Search vendor "Qualcomm" for product "Sdxr2 5g"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sw5100 Firmware Search vendor "Qualcomm" for product "Sw5100 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sw5100 Search vendor "Qualcomm" for product "Sw5100"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sw5100p Firmware Search vendor "Qualcomm" for product "Sw5100p Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sw5100p Search vendor "Qualcomm" for product "Sw5100p"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcd9341 Firmware Search vendor "Qualcomm" for product "Wcd9341 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcd9341 Search vendor "Qualcomm" for product "Wcd9341"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcd9370 Firmware Search vendor "Qualcomm" for product "Wcd9370 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcd9370 Search vendor "Qualcomm" for product "Wcd9370"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcd9380 Firmware Search vendor "Qualcomm" for product "Wcd9380 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcd9380 Search vendor "Qualcomm" for product "Wcd9380"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn3660b Firmware Search vendor "Qualcomm" for product "Wcn3660b Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn3660b Search vendor "Qualcomm" for product "Wcn3660b"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn3680b Firmware Search vendor "Qualcomm" for product "Wcn3680b Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn3680b Search vendor "Qualcomm" for product "Wcn3680b"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn3950 Firmware Search vendor "Qualcomm" for product "Wcn3950 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn3950 Search vendor "Qualcomm" for product "Wcn3950"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn3980 Firmware Search vendor "Qualcomm" for product "Wcn3980 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn3980 Search vendor "Qualcomm" for product "Wcn3980"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn3988 Firmware Search vendor "Qualcomm" for product "Wcn3988 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn3988 Search vendor "Qualcomm" for product "Wcn3988"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn6850 Firmware Search vendor "Qualcomm" for product "Wcn6850 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn6850 Search vendor "Qualcomm" for product "Wcn6850"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn6851 Firmware Search vendor "Qualcomm" for product "Wcn6851 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn6851 Search vendor "Qualcomm" for product "Wcn6851"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn6855 Firmware Search vendor "Qualcomm" for product "Wcn6855 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn6855 Search vendor "Qualcomm" for product "Wcn6855"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn6856 Firmware Search vendor "Qualcomm" for product "Wcn6856 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn6856 Search vendor "Qualcomm" for product "Wcn6856"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn7850 Firmware Search vendor "Qualcomm" for product "Wcn7850 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn7850 Search vendor "Qualcomm" for product "Wcn7850"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wcn7851 Firmware Search vendor "Qualcomm" for product "Wcn7851 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wcn7851 Search vendor "Qualcomm" for product "Wcn7851"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wsa8810 Firmware Search vendor "Qualcomm" for product "Wsa8810 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wsa8810 Search vendor "Qualcomm" for product "Wsa8810"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wsa8815 Firmware Search vendor "Qualcomm" for product "Wsa8815 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wsa8815 Search vendor "Qualcomm" for product "Wsa8815"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wsa8830 Firmware Search vendor "Qualcomm" for product "Wsa8830 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wsa8830 Search vendor "Qualcomm" for product "Wsa8830"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Wsa8835 Firmware Search vendor "Qualcomm" for product "Wsa8835 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Wsa8835 Search vendor "Qualcomm" for product "Wsa8835"	-	-	Safe