Vulnerability identifier: #VU83671

Vulnerability risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-33092

CWE-ID: CWE-120

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
AQT1000
Mobile applications / Mobile firmware & hardware
FastConnect 6200
Mobile applications / Mobile firmware & hardware
FastConnect 6700
Mobile applications / Mobile firmware & hardware
FastConnect 6800
Mobile applications / Mobile firmware & hardware
FastConnect 6900
Mobile applications / Mobile firmware & hardware
FastConnect 7800
Mobile applications / Mobile firmware & hardware
QCA6310
Mobile applications / Mobile firmware & hardware
QCA6320
Mobile applications / Mobile firmware & hardware
QCA6391
Mobile applications / Mobile firmware & hardware
QCA6420
Mobile applications / Mobile firmware & hardware
QCA6430
Mobile applications / Mobile firmware & hardware
QCM4325
Mobile applications / Mobile firmware & hardware
QCM4490
Mobile applications / Mobile firmware & hardware
QCM5430
Mobile applications / Mobile firmware & hardware
QCM6490
Mobile applications / Mobile firmware & hardware
QCM8550
Mobile applications / Mobile firmware & hardware
QCS4490
Mobile applications / Mobile firmware & hardware
QCS5430
Mobile applications / Mobile firmware & hardware
QCS6490
Mobile applications / Mobile firmware & hardware
QCS7230
Mobile applications / Mobile firmware & hardware
QCS8250
Mobile applications / Mobile firmware & hardware
QCS8550
Mobile applications / Mobile firmware & hardware
Qualcomm 215 Mobile Platform
Mobile applications / Mobile firmware & hardware
Qualcomm Video Collaboration VC3 Platform
Mobile applications / Mobile firmware & hardware
Qualcomm Video Collaboration VC5 Platform
Mobile applications / Mobile firmware & hardware
SG4150P
Mobile applications / Mobile firmware & hardware
SM6250
Mobile applications / Mobile firmware & hardware
SM7250P
Mobile applications / Mobile firmware & hardware
SM7315
Mobile applications / Mobile firmware & hardware
SM7325P
Mobile applications / Mobile firmware & hardware
SM8550P
Mobile applications / Mobile firmware & hardware
Snapdragon 4 Gen 1 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 4 Gen 2 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 460 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 480 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
Mobile applications / Mobile firmware & hardware
Snapdragon 662 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 680 4G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 685 4G Mobile Platform (SM6225-AD)
Mobile applications / Mobile firmware & hardware
Snapdragon 690 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 695 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 720G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 730 Mobile Platform (SM7150-AA)
Mobile applications / Mobile firmware & hardware
Snapdragon 730G Mobile Platform (SM7150-AB)
Mobile applications / Mobile firmware & hardware
Snapdragon 732G Mobile Platform (SM7150-AC)
Mobile applications / Mobile firmware & hardware
Snapdragon 765 5G Mobile Platform (SM7250-AA)
Mobile applications / Mobile firmware & hardware
Snapdragon 765G 5G Mobile Platform (SM7250-AB)
Mobile applications / Mobile firmware & hardware
Snapdragon 768G 5G Mobile Platform (SM7250-AC)
Mobile applications / Mobile firmware & hardware
Snapdragon 778G 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
Mobile applications / Mobile firmware & hardware
Snapdragon 780G 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 782G Mobile Platform (SM7325-AF)
Mobile applications / Mobile firmware & hardware
Snapdragon 7c+ Gen 3 Compute
Mobile applications / Mobile firmware & hardware
Snapdragon 8 Gen 1 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 8 Gen 2 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 8+ Gen 2 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 835 Mobile PC Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 855 Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 855+/860 Mobile Platform (SM8150-AC)
Mobile applications / Mobile firmware & hardware
Snapdragon 865 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
Mobile applications / Mobile firmware & hardware
Snapdragon 870 5G Mobile Platform (SM8250-AC)
Mobile applications / Mobile firmware & hardware
Snapdragon 888 5G Mobile Platform
Mobile applications / Mobile firmware & hardware
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Mobile applications / Mobile firmware & hardware
Snapdragon X55 5G Modem-RF System
Mobile applications / Mobile firmware & hardware
WCD9326
Mobile applications / Mobile firmware & hardware
WCD9335
Mobile applications / Mobile firmware & hardware
WCD9340
Mobile applications / Mobile firmware & hardware
WCD9341
Mobile applications / Mobile firmware & hardware
WCD9370
Mobile applications / Mobile firmware & hardware
WCD9375
Mobile applications / Mobile firmware & hardware
WCD9380
Mobile applications / Mobile firmware & hardware
WCD9385
Mobile applications / Mobile firmware & hardware
WCD9390
Mobile applications / Mobile firmware & hardware
WCD9395
Mobile applications / Mobile firmware & hardware
WCN3615
Mobile applications / Mobile firmware & hardware
WCN3660B
Mobile applications / Mobile firmware & hardware
WCN3680B
Mobile applications / Mobile firmware & hardware
WCN3950
Mobile applications / Mobile firmware & hardware
WCN3980
Mobile applications / Mobile firmware & hardware
WCN3988
Mobile applications / Mobile firmware & hardware
WCN3990
Mobile applications / Mobile firmware & hardware
WCN6740
Mobile applications / Mobile firmware & hardware
WSA8810
Mobile applications / Mobile firmware & hardware
WSA8815
Mobile applications / Mobile firmware & hardware
WSA8830
Mobile applications / Mobile firmware & hardware
WSA8835
Mobile applications / Mobile firmware & hardware
WSA8840
Mobile applications / Mobile firmware & hardware
WSA8845
Mobile applications / Mobile firmware & hardware
WSA8845H
Mobile applications / Mobile firmware & hardware
SD730
Hardware solutions / Firmware
SD835
Hardware solutions / Firmware
SD855
Hardware solutions / Firmware
SD888
Hardware solutions / Firmware
WSA8832
Hardware solutions / Firmware

Vendor: Qualcomm

Description

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to improper input validation in Bluetooth HOST. A local application can execute arbitrary code.

Mitigation
Install security update from vendor's website.

Vulnerable software versions

AQT1000: All versions

FastConnect 6200: All versions

FastConnect 6700: All versions

FastConnect 6800: All versions

FastConnect 6900: All versions

FastConnect 7800: All versions

QCA6310: All versions

QCA6320: All versions

QCA6391: All versions

QCA6420: All versions

QCA6430: All versions

QCM4325: All versions

QCM4490: All versions

QCM5430: All versions

QCM6490: All versions

QCM8550: All versions

QCS4490: All versions

QCS5430: All versions

QCS6490: All versions

QCS7230: All versions

QCS8250: All versions

QCS8550: All versions

Qualcomm 215 Mobile Platform: All versions

Qualcomm Video Collaboration VC3 Platform: All versions

Qualcomm Video Collaboration VC5 Platform: All versions

SD730: All versions

SD835: All versions

SD855: All versions

SD888: All versions

SG4150P: All versions

SM6250: All versions

SM7250P: All versions

SM7315: All versions

SM7325P: All versions

SM8550P: All versions

Snapdragon 4 Gen 1 Mobile Platform: All versions

Snapdragon 4 Gen 2 Mobile Platform: All versions

Snapdragon 460 Mobile Platform: All versions

Snapdragon 480 5G Mobile Platform: All versions

Snapdragon 480+ 5G Mobile Platform (SM4350-AC): All versions

Snapdragon 662 Mobile Platform: All versions

Snapdragon 680 4G Mobile Platform: All versions

Snapdragon 685 4G Mobile Platform (SM6225-AD): All versions

Snapdragon 690 5G Mobile Platform: All versions

Snapdragon 695 5G Mobile Platform: All versions

Snapdragon 720G Mobile Platform: All versions

Snapdragon 730 Mobile Platform (SM7150-AA): All versions

Snapdragon 730G Mobile Platform (SM7150-AB): All versions

Snapdragon 732G Mobile Platform (SM7150-AC): All versions

Snapdragon 765 5G Mobile Platform (SM7250-AA): All versions

Snapdragon 765G 5G Mobile Platform (SM7250-AB): All versions

Snapdragon 768G 5G Mobile Platform (SM7250-AC): All versions

Snapdragon 778G 5G Mobile Platform: All versions

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE): All versions

Snapdragon 780G 5G Mobile Platform: All versions

Snapdragon 782G Mobile Platform (SM7325-AF): All versions

Snapdragon 7c+ Gen 3 Compute: All versions

Snapdragon 8 Gen 1 Mobile Platform: All versions

Snapdragon 8 Gen 2 Mobile Platform: All versions

Snapdragon 8+ Gen 2 Mobile Platform: All versions

Snapdragon 835 Mobile PC Platform: All versions

Snapdragon 855 Mobile Platform: All versions

Snapdragon 855+/860 Mobile Platform (SM8150-AC): All versions

Snapdragon 865 5G Mobile Platform: All versions

Snapdragon 865+ 5G Mobile Platform (SM8250-AB): All versions

Snapdragon 870 5G Mobile Platform (SM8250-AC): All versions

Snapdragon 888 5G Mobile Platform: All versions

Snapdragon 888+ 5G Mobile Platform (SM8350-AC): All versions

Snapdragon X55 5G Modem-RF System: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9370: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCD9390: All versions

WCD9395: All versions

WCN3615: All versions

WCN3660B: All versions

WCN3680B: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN6740: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8832: All versions

WSA8835: All versions

WSA8840: All versions

WSA8845: All versions

WSA8845H: All versions

---

External links
http://docs.qualcomm.com/product/publicresources/securitybulletin/december-2023-bulletin.html

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.