CVE-2023-28576: qualcomm, inc. snapdragon

Vulnerability summary

CVE-2023-28576 is a high (CVSS 7.0) vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.08% chance of exploitation in the next 30 days, higher than 0.2% of scored vulnerabilities.

Timeline

1. 08-08-2023
   PublishedVulnerability first disclosed.
2. 02-08-2024
   Last modifiedVulnerability information updated.

Description

The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.

• CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionThe product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.