Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-33111: Qualcomm firmware may expose internal calibration data

CVE-2023-33111 · published 2 years ago

Summary

Some Qualcomm firmware versions can reveal hidden calibration settings when a specific command is used. This unintended disclosure could give attackers insight into the device’s internal state. Update the firmware to the latest version provided by the vendor or apply any recommended patches.

What to do

Update google :unknown: to version SoCVersion:2024-01-05.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	:unknown:	>= SoCVersion:0, < SoCVersion:2024-01-05 Fix: upgrade to SoCVersion:2024-01-05
–	qualcomm	ar8035_firmware	All versions `cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::*`
–	qualcomm	c-v2x_9150_firmware	All versions `cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:::::::*`
–	qualcomm	fastconnect_6700_firmware	All versions `cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:::::::*`
–	qualcomm	fastconnect_6800_firmware	All versions `cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:::::::*`
–	qualcomm	fastconnect_6900_firmware	All versions `cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:::::::*`
–	qualcomm	fastconnect_7800_firmware	All versions `cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::*`
–	qualcomm	qam8255p_firmware	All versions `cpe:2.3:o:qualcomm:qam8255p_firmware:-:::::::*`
–	qualcomm	qam8295p_firmware	All versions `cpe:2.3:o:qualcomm:qam8295p_firmware:-:::::::*`
–	qualcomm	qam8650p_firmware	All versions `cpe:2.3:o:qualcomm:qam8650p_firmware:-:::::::*`
–	qualcomm	qam8775p_firmware	All versions `cpe:2.3:o:qualcomm:qam8775p_firmware:-:::::::*`
–	qualcomm	qamsrv1h_firmware	All versions `cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:::::::*`
–	qualcomm	qamsrv1m_firmware	All versions `cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:::::::*`
–	qualcomm	qca6391_firmware	All versions `cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*`
–	qualcomm	qca6426_firmware	All versions `cpe:2.3:o:qualcomm:qca6426_firmware:-:::::::*`
–	qualcomm	qca6436_firmware	All versions `cpe:2.3:o:qualcomm:qca6436_firmware:-:::::::*`
–	qualcomm	qca6574au_firmware	All versions `cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::*`
–	qualcomm	qca6584au_firmware	All versions `cpe:2.3:o:qualcomm:qca6584au_firmware:-:::::::*`
–	qualcomm	qca6696_firmware	All versions `cpe:2.3:o:qualcomm:qca6696_firmware:-:::::::*`
–	qualcomm	qca6698aq_firmware	All versions `cpe:2.3:o:qualcomm:qca6698aq_firmware:-:::::::*`
–	qualcomm	qca8081_firmware	All versions `cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::*`
–	qualcomm	qca8337_firmware	All versions `cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::*`
–	qualcomm	qca9367_firmware	All versions `cpe:2.3:o:qualcomm:qca9367_firmware:-:::::::*`
–	qualcomm	qca9377_firmware	All versions `cpe:2.3:o:qualcomm:qca9377_firmware:-:::::::*`
–	qualcomm	qcc710_firmware	All versions `cpe:2.3:o:qualcomm:qcc710_firmware:-:::::::*`
–	qualcomm	qcn6224_firmware	All versions `cpe:2.3:o:qualcomm:qcn6224_firmware:-:::::::*`
–	qualcomm	qcn6274_firmware	All versions `cpe:2.3:o:qualcomm:qcn6274_firmware:-:::::::*`
–	qualcomm	qcn9074_firmware	All versions `cpe:2.3:o:qualcomm:qcn9074_firmware:-:::::::*`
–	qualcomm	qcs410_firmware	All versions `cpe:2.3:o:qualcomm:qcs410_firmware:-:::::::*`
–	qualcomm	qcs610_firmware	All versions `cpe:2.3:o:qualcomm:qcs610_firmware:-:::::::*`
–	qualcomm	qfw7114_firmware	All versions `cpe:2.3:o:qualcomm:qfw7114_firmware:-:::::::*`
–	qualcomm	qfw7124_firmware	All versions `cpe:2.3:o:qualcomm:qfw7124_firmware:-:::::::*`
–	qualcomm	video_collaboration_vc1_platform_firmware	All versions `cpe:2.3:o:qualcomm:video_collaboration_vc1_platform_firmware:-:::::::*`
–	qualcomm	video_collaboration_vc3_platform_firmware	All versions `cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:::::::*`
–	qualcomm	sa6145p_firmware	All versions `cpe:2.3:o:qualcomm:sa6145p_firmware:-:::::::*`
–	qualcomm	sa6150p_firmware	All versions `cpe:2.3:o:qualcomm:sa6150p_firmware:-:::::::*`
–	qualcomm	sa6155p_firmware	All versions `cpe:2.3:o:qualcomm:sa6155p_firmware:-:::::::*`
–	qualcomm	sa7255p_firmware	All versions `cpe:2.3:o:qualcomm:sa7255p_firmware:-:::::::*`
–	qualcomm	sa8145p_firmware	All versions `cpe:2.3:o:qualcomm:sa8145p_firmware:-:::::::*`
–	qualcomm	sa8150p_firmware	All versions `cpe:2.3:o:qualcomm:sa8150p_firmware:-:::::::*`
–	qualcomm	sa8155p_firmware	All versions `cpe:2.3:o:qualcomm:sa8155p_firmware:-:::::::*`
–	qualcomm	sa8195p_firmware	All versions `cpe:2.3:o:qualcomm:sa8195p_firmware:-:::::::*`
–	qualcomm	sa8255p_firmware	All versions `cpe:2.3:o:qualcomm:sa8255p_firmware:-:::::::*`
–	qualcomm	sa8295p_firmware	All versions `cpe:2.3:o:qualcomm:sa8295p_firmware:-:::::::*`
–	qualcomm	sa8620p_firmware	All versions `cpe:2.3:o:qualcomm:sa8620p_firmware:-:::::::*`
–	qualcomm	sa8650p_firmware	All versions `cpe:2.3:o:qualcomm:sa8650p_firmware:-:::::::*`
–	qualcomm	sa8770p_firmware	All versions `cpe:2.3:o:qualcomm:sa8770p_firmware:-:::::::*`
–	qualcomm	sa8775p_firmware	All versions `cpe:2.3:o:qualcomm:sa8775p_firmware:-:::::::*`
–	qualcomm	sa9000p_firmware	All versions `cpe:2.3:o:qualcomm:sa9000p_firmware:-:::::::*`
–	qualcomm	sd865_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd865_5g_firmware:-:::::::*`

Showing 50 of 87. Show the rest

Ecosystem	Vendor	Product	Affected versions
–	qualcomm	sd888_firmware	All versions `cpe:2.3:o:qualcomm:sd888_firmware:-:::::::*`
–	qualcomm	sm7315_firmware	All versions `cpe:2.3:o:qualcomm:sm7315_firmware:-:::::::*`
–	qualcomm	sm7325p_firmware	All versions `cpe:2.3:o:qualcomm:sm7325p_firmware:-:::::::*`
–	qualcomm	snapdragon_778g_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_778g\+_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_778g\+_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_780g_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_780g_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_782g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_782g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_7c\+_gen_3_compute_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:::::::*`
–	qualcomm	snapdragon_865_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_865\+_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_865\+_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_870_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_888_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_888\+_5g_mobile_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_888\+_5g_mobile_firmware:-:::::::*`
–	qualcomm	snapdragon_auto_5g_modem-rf_gen_2_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:::::::*`
–	qualcomm	snapdragon_wear_4100\+_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_wear_4100\+_firmware:-:::::::*`
–	qualcomm	snapdragon_x55_5g_modem-rf_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_firmware:-:::::::*`
–	qualcomm	snapdragon_x75_5g_modem-rf_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_firmware:-:::::::*`
–	qualcomm	snapdragon_xr2_5g_firmware	All versions `cpe:2.3:o:qualcomm:snapdragon_xr2_5g_firmware:-:::::::*`
–	qualcomm	srv1h_firmware	All versions `cpe:2.3:o:qualcomm:srv1h_firmware:-:::::::*`
–	qualcomm	srv1m_firmware	All versions `cpe:2.3:o:qualcomm:srv1m_firmware:-:::::::*`
–	qualcomm	sxr2130_firmware	All versions `cpe:2.3:o:qualcomm:sxr2130_firmware:-:::::::*`
–	qualcomm	wcd9340_firmware	All versions `cpe:2.3:o:qualcomm:wcd9340_firmware:-:::::::*`
–	qualcomm	wcd9341_firmware	All versions `cpe:2.3:o:qualcomm:wcd9341_firmware:-:::::::*`
–	qualcomm	wcd9370_firmware	All versions `cpe:2.3:o:qualcomm:wcd9370_firmware:-:::::::*`
–	qualcomm	wcd9375_firmware	All versions `cpe:2.3:o:qualcomm:wcd9375_firmware:-:::::::*`
–	qualcomm	wcd9380_firmware	All versions `cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::*`
–	qualcomm	wcd9385_firmware	All versions `cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::*`
–	qualcomm	wcn3610_firmware	All versions `cpe:2.3:o:qualcomm:wcn3610_firmware:-:::::::*`
–	qualcomm	wcn3660b_firmware	All versions `cpe:2.3:o:qualcomm:wcn3660b_firmware:-:::::::*`
–	qualcomm	wcn3680b_firmware	All versions `cpe:2.3:o:qualcomm:wcn3680b_firmware:-:::::::*`
–	qualcomm	wcn3950_firmware	All versions `cpe:2.3:o:qualcomm:wcn3950_firmware:-:::::::*`
–	qualcomm	wcn3980_firmware	All versions `cpe:2.3:o:qualcomm:wcn3980_firmware:-:::::::*`
–	qualcomm	wcn6740_firmware	All versions `cpe:2.3:o:qualcomm:wcn6740_firmware:-:::::::*`
–	qualcomm	wsa8810_firmware	All versions `cpe:2.3:o:qualcomm:wsa8810_firmware:-:::::::*`
–	qualcomm	wsa8815_firmware	All versions `cpe:2.3:o:qualcomm:wsa8815_firmware:-:::::::*`
–	qualcomm	wsa8830_firmware	All versions `cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::*`
–	qualcomm	wsa8835_firmware	All versions `cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*`

Original advisory text

PUB-A-303107435

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.

References

https://source.android.com/security/bulletin/2024-01-01 Vendor Advisory
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bu... Patch Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-129Improper Validation of Array Index

Timeline

Published1 Jan 2024

Updated26 Oct 2026

First seen8 Sep 2026

Sources

PUB-A-303107435 · OSV

CVE-2023-33111 · NVD

Track software like this

Free during beta