CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-21666
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
- CWE
- CWE-401
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:8905_firmware
- qualcomm:8909_firmware
- qualcomm:8917_firmware
- qualcomm:8953_firmware
- qualcomm:8953pro_firmware
- qualcomm:8998_firmware
- qualcomm:apq5053-aa_firmware
- qualcomm:apq8053-aa_firmware
- qualcomm:apq8053-ac_firmware
- qualcomm:apq8053-lite_firmware
- qualcomm:flight_rb5_5g_platform_firmware
- qualcomm:home_hub_100_platform_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9628_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:qca6174_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6335_firmware
- qualcomm:qca6390_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6564_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca8337_firmware
- qualcomm:qca9367_firmware
- qualcomm:qca9377_firmware
- qualcomm:qca9379_firmware
- qualcomm:qcm2290_firmware
- qualcomm:qcm4290_firmware
- qualcomm:qcm6125_firmware
- qualcomm:qcn9011_firmware
- qualcomm:qcn9012_firmware
References
- http://packetstormsecurity.com/files/172664/Qualcomm-Adreno-KGSL-Data-Leakage.html
- https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin
- http://packetstormsecurity.com/files/172664/Qualcomm-Adreno-KGSL-Data-Leakage.html
- https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin