CVE Feed

    Dashboard / CVE / CVE-2023-21650

    CVE-2023-21650

    Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

    Published:Aug 8, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 8, 2023
    EPSS Score:0.00036
    CVSS Score:6.7

    Affected Products

    Vendor
    Qualcomm
    Product
    Aqt1000
    Vendor
    Qualcomm
    Product
    Aqt1000 Firmware
    Vendor
    Qualcomm
    Product
    Csrb31024
    Vendor
    Qualcomm
    Product
    Csrb31024 Firmware
    Vendor
    Qualcomm
    Product
    Qam8295p
    Vendor
    Qualcomm
    Product
    Qam8295p Firmware
    Vendor
    Qualcomm
    Product
    Qca6390
    Vendor
    Qualcomm
    Product
    Qca6390 Firmware
    Vendor
    Qualcomm
    Product
    Qca6391
    Vendor
    Qualcomm
    Product
    Qca6391 Firmware
    Vendor
    Qualcomm
    Product
    Qca6420
    Vendor
    Qualcomm
    Product
    Qca6420 Firmware
    Vendor
    Qualcomm
    Product
    Qca6426
    Vendor
    Qualcomm
    Product
    Qca6426 Firmware
    Vendor
    Qualcomm
    Product
    Qca6430
    Vendor
    Qualcomm
    Product
    Qca6430 Firmware
    Vendor
    Qualcomm
    Product
    Qca6436
    Vendor
    Qualcomm
    Product
    Qca6436 Firmware
    Vendor
    Qualcomm
    Product
    Qca6564
    Vendor
    Qualcomm
    Product
    Qca6564 Firmware
    Vendor
    Qualcomm
    Product
    Qca6564au
    Vendor
    Qualcomm
    Product
    Qca6564au Firmware
    Vendor
    Qualcomm
    Product
    Qca6574a
    Vendor
    Qualcomm
    Product
    Qca6574a Firmware
    Vendor
    Qualcomm
    Product
    Qca6574au
    Vendor
    Qualcomm
    Product
    Qca6574au Firmware
    Vendor
    Qualcomm
    Product
    Qca6595au
    Vendor
    Qualcomm
    Product
    Qca6595au Firmware
    Vendor
    Qualcomm
    Product
    Qca6696
    Vendor
    Qualcomm
    Product
    Qca6696 Firmware
    Vendor
    Qualcomm
    Product
    Qcc5100
    Vendor
    Qualcomm
    Product
    Qcc5100 Firmware
    Vendor
    Qualcomm
    Product
    Qcs410
    Vendor
    Qualcomm
    Product
    Qcs410 Firmware
    Vendor
    Qualcomm
    Product
    Qcs610
    Vendor
    Qualcomm
    Product
    Qcs610 Firmware
    Vendor
    Qualcomm
    Product
    Sa415m
    Vendor
    Qualcomm
    Product
    Sa415m Firmware
    Vendor
    Qualcomm
    Product
    Sa6145p
    Vendor
    Qualcomm
    Product
    Sa6145p Firmware
    Vendor
    Qualcomm
    Product
    Sa6150p
    Vendor
    Qualcomm
    Product
    Sa6150p Firmware
    Vendor
    Qualcomm
    Product
    Sa6155p
    Vendor
    Qualcomm
    Product
    Sa6155p Firmware
    Vendor
    Qualcomm
    Product
    Sa8145p
    Vendor
    Qualcomm
    Product
    Sa8145p Firmware
    Vendor
    Qualcomm
    Product
    Sa8150p
    Vendor
    Qualcomm
    Product
    Sa8150p Firmware
    Vendor
    Qualcomm
    Product
    Sa8155p
    Vendor
    Qualcomm
    Product
    Sa8155p Firmware
    Vendor
    Qualcomm
    Product
    Sa8195p
    Vendor
    Qualcomm
    Product
    Sa8195p Firmware
    Vendor
    Qualcomm
    Product
    Sa8295p
    Vendor
    Qualcomm
    Product
    Sa8295p Firmware
    Vendor
    Qualcomm
    Product
    Sd855
    Vendor
    Qualcomm
    Product
    Sd855 Firmware
    Vendor
    Qualcomm
    Product
    Sd865 5g
    Vendor
    Qualcomm
    Product
    Sd865 5g Firmware
    Vendor
    Qualcomm
    Product
    Sd870
    Vendor
    Qualcomm
    Product
    Sd870 Firmware
    Vendor
    Qualcomm
    Product
    Sda429w
    Vendor
    Qualcomm
    Product
    Sda429w Firmware
    Vendor
    Qualcomm
    Product
    Sdx55m
    Vendor
    Qualcomm
    Product
    Sdx55m Firmware
    Vendor
    Qualcomm
    Product
    Sdxr2 5g
    Vendor
    Qualcomm
    Product
    Sdxr2 5g Firmware
    Vendor
    Qualcomm
    Product
    Sw5100
    Vendor
    Qualcomm
    Product
    Sw5100 Firmware
    Vendor
    Qualcomm
    Product
    Sw5100p
    Vendor
    Qualcomm
    Product
    Sw5100p Firmware
    Vendor
    Qualcomm
    Product
    Wcd9341
    Vendor
    Qualcomm
    Product
    Wcd9341 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9370
    Vendor
    Qualcomm
    Product
    Wcd9370 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3610
    Vendor
    Qualcomm
    Product
    Wcn3610 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3660b
    Vendor
    Qualcomm
    Product
    Wcn3660b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680b
    Vendor
    Qualcomm
    Product
    Wcn3680b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3950
    Vendor
    Qualcomm
    Product
    Wcn3950 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3980
    Vendor
    Qualcomm
    Product
    Wcn3980 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3988
    Vendor
    Qualcomm
    Product
    Wcn3988 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3998
    Vendor
    Qualcomm
    Product
    Wcn3998 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6850
    Vendor
    Qualcomm
    Product
    Wcn6850 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6851
    Vendor
    Qualcomm
    Product
    Wcn6851 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8810
    Vendor
    Qualcomm
    Product
    Wsa8810 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8815
    Vendor
    Qualcomm
    Product
    Wsa8815 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8830
    Vendor
    Qualcomm
    Product
    Wsa8830 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8835
    Vendor
    Qualcomm
    Product
    Wsa8835 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-100 Overflow Buffers

    Related CVEs

    CVE-2025-59611 (CVSS 6.7) — Memory corruption in diagnostic services due to absence of input validation…
    CVE-2026-21378 (CVSS 7.8) — Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a cam…
    CVE-2026-21376 (CVSS 7.8) — Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a cam…
    CVE-2026-21374 (CVSS 7.8) — Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size…
    CVE-2026-21373 (CVSS 7.8) — Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.…
    CVE-2026-21371 (CVSS 7.8) — Memory Corruption when retrieving output buffer with insufficient size validation.…
    CVE-2025-47383 (CVSS 7.2) — Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.…
    CVE-2025-47359 (CVSS 7.8) — Memory Corruption when multiple threads simultaneously access a memory free API.…
    CVE-2025-47348 (CVSS 7.8) — Memory corruption while processing identity credential operations in the trusted application.…
    CVE-2025-47333 (CVSS 6.6) — Memory corruption while handling buffer mapping operations in the cryptographic driver.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High