CVE-2023-24844

Improper Access Control in Core

State: Published
Severity: 8.4 High
Published: Oct 3, 2023
Updated: Feb 27, 2025
Reserved: Jan 31, 2023

Description

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected QCA8081Affected QCA8337Affected QCM4490Affected QCM8550Affected QCN6024Affected QCN9024Affected QCS4490Affected QCS8550Affected QDU1000Affected QDU1010Affected QDU1110Affected QDU1210Affected QDX1010Affected QDX1011Affected QRU1032Affected QRU1052Affected QRU1062Affected SG8275PAffected SM8550PAffected Snapdragon 4 Gen 2 Mobile PlatformAffected Snapdragon 8 Gen 2 Mobile PlatformAffected and 18 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCA8081Affected
QCA8337Affected
QCM4490Affected
QCM8550Affected
QCN6024Affected
QCN9024Affected
QCS4490Affected
QCS8550Affected
QDU1000Affected
QDU1010Affected
QDU1110Affected
QDU1210Affected
QDX1010Affected
QDX1011Affected
QRU1032Affected
QRU1052Affected
QRU1062Affected
SG8275PAffected
SM8550PAffected
Snapdragon 4 Gen 2 Mobile PlatformAffected
Snapdragon 8 Gen 2 Mobile PlatformAffected
and 18 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.