CVE-2023-21648: Integer Overflow to Buffer Overflow in RIL
Published Aug 8, 2023
·Updated
Memory corruption in RIL while trying to send apdu packet.
Affected Software
136 affected components
All of the following
Qualcomm Aqt1000 Firmware
Qualcomm Aqt1000
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6420 Firmware
Qualcomm Qca6420
All of the following
Qualcomm Qca6430 Firmware
Qualcomm Qca6430
All of the following
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qcc5100 Firmware
Qualcomm Qcc5100
All of the following
Qualcomm Sa515m Firmware
Qualcomm Sa515m
All of the following
Qualcomm Sa6145p Firmware
Qualcomm Sa6145p
All of the following
Qualcomm Sa6150p Firmware
Qualcomm Sa6150p
All of the following
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
All of the following
Qualcomm Sa8145p Firmware
Qualcomm Sa8145p
All of the following
Qualcomm Sa8150p Firmware
Qualcomm Sa8150p
All of the following
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
All of the following
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
All of the following
Qualcomm Sd855 Firmware
Qualcomm Sd855
All of the following
Qualcomm Sda429w Firmware
Qualcomm Sda429w
All of the following
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
All of the following
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
All of the following
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
All of the following
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
All of the following
QUALCOMM Wcd9360 Firmware
QUALCOMM Wcd9360
All of the following
Qualcomm Wcn3610 Firmware
Qualcomm Wcn3610
All of the following
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
All of the following
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
All of the following
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Qualcomm Aqt1000 Firmware
Qualcomm Aqt1000
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qca6420 Firmware
Qualcomm Qca6420
Qualcomm Qca6430 Firmware
Qualcomm Qca6430
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
Qualcomm Qcc5100 Firmware
Qualcomm Qcc5100
Qualcomm Sa515m Firmware
Qualcomm Sa515m
Qualcomm Sa6145p Firmware
Qualcomm Sa6145p
Qualcomm Sa6150p Firmware
Qualcomm Sa6150p
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
Qualcomm Sa8145p Firmware
Qualcomm Sa8145p
Qualcomm Sa8150p Firmware
Qualcomm Sa8150p
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
Qualcomm Sd855 Firmware
Qualcomm Sd855
Qualcomm Sda429w Firmware
Qualcomm Sda429w
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
QUALCOMM Wcd9360 Firmware
QUALCOMM Wcd9360
Qualcomm Wcn3610 Firmware
Qualcomm Wcn3610
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Aug 8, 2023
CVE Published
via MITRE·09:14 AM
Data Sourced
via MITRE·09:14 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-21648?
CVE-2023-21648 is a vulnerability related to memory corruption in RIL (Radio Interface Layer) while trying to send an apdu packet.
2
Which software is affected by CVE-2023-21648?
The software affected by CVE-2023-21648 is Google Android with specific firmware versions of Qualcomm AQT1000, QCA6391, QCA6420, QCA6430, QCA6574a, QCA6574au, QCA6595au, QCA6696, QCC5100, Sa515m, Sa6145p, Sa6150p, Sa6155p, Sa8145p, Sa8150p, Sa8155p, Sa8195p, SD855, SDA429w, SDX55, SW5100, SW5100p, WCD9341, WCD9360, WCN3610, WCN3660b, WCN3680b, WCN3980, WCN3988, WCN3998, WSA8810, WSA8815, WSA8830, and WSA8835.
3
What is the severity of CVE-2023-21648?
The severity of CVE-2023-21648 is high, with a CVSS score of 7.8.
4
How does CVE-2023-21648 impact the affected software?
CVE-2023-21648 can result in memory corruption in the RIL component of the affected software while attempting to send an apdu packet, which can lead to potential security risks.
5
Where can I find more information about CVE-2023-21648?
You can find more information about CVE-2023-21648 in the August 2023 bulletin on the Qualcomm Product Security website.