CVE-2023-33071
Improper Access Control in Automotive OS Platform Android
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
Corrupción de la memoria en el sistema operativo automotriz cada vez que aplicaciones que no son de confianza intentan acceder a HAb para funciones gráficas.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-05-17 CVE Reserved
- 2023-12-05 CVE Published
- 2023-12-05 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
- CWE-863: Incorrect Authorization
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin | 2024-04-12 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Qca6574 Firmware Search vendor "Qualcomm" for product "Qca6574 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574 Search vendor "Qualcomm" for product "Qca6574" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6574a Firmware Search vendor "Qualcomm" for product "Qca6574a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574a Search vendor "Qualcomm" for product "Qca6574a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6574au Firmware Search vendor "Qualcomm" for product "Qca6574au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574au Search vendor "Qualcomm" for product "Qca6574au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6595au Firmware Search vendor "Qualcomm" for product "Qca6595au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6595au Search vendor "Qualcomm" for product "Qca6595au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6145p Firmware Search vendor "Qualcomm" for product "Sa6145p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6145p Search vendor "Qualcomm" for product "Sa6145p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6150p Firmware Search vendor "Qualcomm" for product "Sa6150p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6150p Search vendor "Qualcomm" for product "Sa6150p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155 Firmware Search vendor "Qualcomm" for product "Sa6155 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155 Search vendor "Qualcomm" for product "Sa6155" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155p Firmware Search vendor "Qualcomm" for product "Sa6155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155p Search vendor "Qualcomm" for product "Sa6155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8145p Firmware Search vendor "Qualcomm" for product "Sa8145p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8145p Search vendor "Qualcomm" for product "Sa8145p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8150p Firmware Search vendor "Qualcomm" for product "Sa8150p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8150p Search vendor "Qualcomm" for product "Sa8150p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155 Firmware Search vendor "Qualcomm" for product "Sa8155 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155 Search vendor "Qualcomm" for product "Sa8155" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155p Firmware Search vendor "Qualcomm" for product "Sa8155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155p Search vendor "Qualcomm" for product "Sa8155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8195p Firmware Search vendor "Qualcomm" for product "Sa8195p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8195p Search vendor "Qualcomm" for product "Sa8195p" | - | - |
Safe
|