CVE-2023-28575
Multiple Type Confusion Vulnerability
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
La función cam_get_device_priv no comprueba el tipo de manejador devuelto (device/session/link). Esto llevaría a un uso de tipo inválido si se le pasa un manejador incorrecto.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-17 CVE Reserved
- 2023-08-08 CVE Published
- 2024-08-02 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-823: Use of Out-of-range Pointer Offset
- CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin | 2024-04-12 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Aqt1000 Firmware Search vendor "Qualcomm" for product "Aqt1000 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Aqt1000 Search vendor "Qualcomm" for product "Aqt1000" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | C-v2x 9150 Firmware Search vendor "Qualcomm" for product "C-v2x 9150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | C-v2x 9150 Search vendor "Qualcomm" for product "C-v2x 9150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Fastconnect 6200 Firmware Search vendor "Qualcomm" for product "Fastconnect 6200 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Fastconnect 6200 Search vendor "Qualcomm" for product "Fastconnect 6200" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Fastconnect 6800 Firmware Search vendor "Qualcomm" for product "Fastconnect 6800 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Fastconnect 6800 Search vendor "Qualcomm" for product "Fastconnect 6800" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Fastconnect 6900 Firmware Search vendor "Qualcomm" for product "Fastconnect 6900 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Fastconnect 6900 Search vendor "Qualcomm" for product "Fastconnect 6900" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Fastconnect 7800 Firmware Search vendor "Qualcomm" for product "Fastconnect 7800 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Fastconnect 7800 Search vendor "Qualcomm" for product "Fastconnect 7800" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qam8295p Firmware Search vendor "Qualcomm" for product "Qam8295p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qam8295p Search vendor "Qualcomm" for product "Qam8295p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6391 Firmware Search vendor "Qualcomm" for product "Qca6391 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6391 Search vendor "Qualcomm" for product "Qca6391" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6420 Firmware Search vendor "Qualcomm" for product "Qca6420 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6420 Search vendor "Qualcomm" for product "Qca6420" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6426 Firmware Search vendor "Qualcomm" for product "Qca6426 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6426 Search vendor "Qualcomm" for product "Qca6426" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6430 Firmware Search vendor "Qualcomm" for product "Qca6430 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6430 Search vendor "Qualcomm" for product "Qca6430" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6436 Firmware Search vendor "Qualcomm" for product "Qca6436 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6436 Search vendor "Qualcomm" for product "Qca6436" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6574au Firmware Search vendor "Qualcomm" for product "Qca6574au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574au Search vendor "Qualcomm" for product "Qca6574au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6696 Firmware Search vendor "Qualcomm" for product "Qca6696 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6696 Search vendor "Qualcomm" for product "Qca6696" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8337 Firmware Search vendor "Qualcomm" for product "Qca8337 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8337 Search vendor "Qualcomm" for product "Qca8337" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn9074 Firmware Search vendor "Qualcomm" for product "Qcn9074 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn9074 Search vendor "Qualcomm" for product "Qcn9074" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs410 Firmware Search vendor "Qualcomm" for product "Qcs410 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs410 Search vendor "Qualcomm" for product "Qcs410" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs610 Firmware Search vendor "Qualcomm" for product "Qcs610 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs610 Search vendor "Qualcomm" for product "Qcs610" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs8155 Firmware Search vendor "Qualcomm" for product "Qcs8155 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs8155 Search vendor "Qualcomm" for product "Qcs8155" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | 205 Firmware Search vendor "Qualcomm" for product "205 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | 205 Search vendor "Qualcomm" for product "205" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | 215 Firmware Search vendor "Qualcomm" for product "215 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | 215 Search vendor "Qualcomm" for product "215" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6145p Firmware Search vendor "Qualcomm" for product "Sa6145p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6145p Search vendor "Qualcomm" for product "Sa6145p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6150p Firmware Search vendor "Qualcomm" for product "Sa6150p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6150p Search vendor "Qualcomm" for product "Sa6150p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155p Firmware Search vendor "Qualcomm" for product "Sa6155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155p Search vendor "Qualcomm" for product "Sa6155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8145p Firmware Search vendor "Qualcomm" for product "Sa8145p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8145p Search vendor "Qualcomm" for product "Sa8145p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8150p Firmware Search vendor "Qualcomm" for product "Sa8150p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8150p Search vendor "Qualcomm" for product "Sa8150p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155p Firmware Search vendor "Qualcomm" for product "Sa8155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155p Search vendor "Qualcomm" for product "Sa8155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8195p Firmware Search vendor "Qualcomm" for product "Sa8195p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8195p Search vendor "Qualcomm" for product "Sa8195p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8295p Firmware Search vendor "Qualcomm" for product "Sa8295p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8295p Search vendor "Qualcomm" for product "Sa8295p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd855 Firmware Search vendor "Qualcomm" for product "Sd855 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd855 Search vendor "Qualcomm" for product "Sd855" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd865 5g Firmware Search vendor "Qualcomm" for product "Sd865 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd865 5g Search vendor "Qualcomm" for product "Sd865 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55 Firmware Search vendor "Qualcomm" for product "Sdx55 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55 Search vendor "Qualcomm" for product "Sdx55" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd210 Firmware Search vendor "Qualcomm" for product "Sd210 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd210 Search vendor "Qualcomm" for product "Sd210" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sd212 Firmware Search vendor "Qualcomm" for product "Sd212 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sd212 Search vendor "Qualcomm" for product "Sd212" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 8 Gen 1 Firmware Search vendor "Qualcomm" for product "Snapdragon 8 Gen 1 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 8 Gen 1 Search vendor "Qualcomm" for product "Snapdragon 8 Gen 1" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 855 Firmware Search vendor "Qualcomm" for product "Snapdragon 855 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 855 Search vendor "Qualcomm" for product "Snapdragon 855" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 855\+\/860 Firmware Search vendor "Qualcomm" for product "Snapdragon 855\+\/860 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 855\+\/860 Search vendor "Qualcomm" for product "Snapdragon 855\+\/860" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 865 5g Firmware Search vendor "Qualcomm" for product "Snapdragon 865 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 865 5g Search vendor "Qualcomm" for product "Snapdragon 865 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 865\+ 5g Firmware Search vendor "Qualcomm" for product "Snapdragon 865\+ 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 865\+ 5g Search vendor "Qualcomm" for product "Snapdragon 865\+ 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 870 5g Firmware Search vendor "Qualcomm" for product "Snapdragon 870 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 870 5g Search vendor "Qualcomm" for product "Snapdragon 870 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon W5\+ Gen 1 Firmware Search vendor "Qualcomm" for product "Snapdragon W5\+ Gen 1 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon W5\+ Gen 1 Search vendor "Qualcomm" for product "Snapdragon W5\+ Gen 1" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon Wear 4100\+ Firmware Search vendor "Qualcomm" for product "Snapdragon Wear 4100\+ Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon Wear 4100\+ Search vendor "Qualcomm" for product "Snapdragon Wear 4100\+" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon X55 5g Firmware Search vendor "Qualcomm" for product "Snapdragon X55 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon X55 5g Search vendor "Qualcomm" for product "Snapdragon X55 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon Xr2 5g Firmware Search vendor "Qualcomm" for product "Snapdragon Xr2 5g Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon Xr2 5g Search vendor "Qualcomm" for product "Snapdragon Xr2 5g" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sw5100 Firmware Search vendor "Qualcomm" for product "Sw5100 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sw5100 Search vendor "Qualcomm" for product "Sw5100" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sw5100p Firmware Search vendor "Qualcomm" for product "Sw5100p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sw5100p Search vendor "Qualcomm" for product "Sw5100p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr2130 Firmware Search vendor "Qualcomm" for product "Sxr2130 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr2130 Search vendor "Qualcomm" for product "Sxr2130" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9341 Firmware Search vendor "Qualcomm" for product "Wcd9341 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9341 Search vendor "Qualcomm" for product "Wcd9341" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9370 Firmware Search vendor "Qualcomm" for product "Wcd9370 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9370 Search vendor "Qualcomm" for product "Wcd9370" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9380 Firmware Search vendor "Qualcomm" for product "Wcd9380 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9380 Search vendor "Qualcomm" for product "Wcd9380" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3610 Firmware Search vendor "Qualcomm" for product "Wcn3610 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3610 Search vendor "Qualcomm" for product "Wcn3610" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3660b Firmware Search vendor "Qualcomm" for product "Wcn3660b Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3660b Search vendor "Qualcomm" for product "Wcn3660b" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3680b Firmware Search vendor "Qualcomm" for product "Wcn3680b Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3680b Search vendor "Qualcomm" for product "Wcn3680b" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3950 Firmware Search vendor "Qualcomm" for product "Wcn3950 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3950 Search vendor "Qualcomm" for product "Wcn3950" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3980 Firmware Search vendor "Qualcomm" for product "Wcn3980 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3980 Search vendor "Qualcomm" for product "Wcn3980" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcn3988 Firmware Search vendor "Qualcomm" for product "Wcn3988 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcn3988 Search vendor "Qualcomm" for product "Wcn3988" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8810 Firmware Search vendor "Qualcomm" for product "Wsa8810 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8810 Search vendor "Qualcomm" for product "Wsa8810" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8815 Firmware Search vendor "Qualcomm" for product "Wsa8815 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8815 Search vendor "Qualcomm" for product "Wsa8815" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8830 Firmware Search vendor "Qualcomm" for product "Wsa8830 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8830 Search vendor "Qualcomm" for product "Wsa8830" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8835 Firmware Search vendor "Qualcomm" for product "Wsa8835 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8835 Search vendor "Qualcomm" for product "Wsa8835" | - | - |
Safe
|