{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2023-38203", "aliases": [], "title": "ColdFusion：コード実行", "summary": "Adobe ColdFusion の 2018u17 以前、2021u7 以前、2023u1 以前のバージョンは、信頼できないデータの逆シリアライズに起因する脆弱性があり、任意のコードを実行できる可能性があります。この脆弱性の悪用にはユーザーの操作は不要です。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で任意のコードが実行される恐れがあります。", "product": "ColdFusion", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "adobe", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "ColdFusion", "range": "<= cf2023U1" }, { "product": "ColdFusion", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-38203」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-38203", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38203", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-07-20T15:41:10.683Z", "modifiedAt": "2025-10-21T23:05:42.563Z", "fetchedAt": "2026-10-24T08:04:14.526Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.", "sourceTitle": "Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "ColdFusion", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "cf2023U1", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-38203", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "fetchedAt": "2026-10-24T08:04:14.526Z", "publishedAt": "2023-07-20T15:41:10.683Z", "modifiedAt": "2025-10-21T23:05:42.563Z", "state": "published", "provider": "adobe", "title": "Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE", "descriptions": [ { "lang": "en", "value": "Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Adobe", "product": "ColdFusion", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "cf2023U1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "Deserialization of Untrusted Data (CWE-502)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "adobe", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38203", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"ColdFusion\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"cf2023U1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-502\",\"description\":\"Deserialization of Untrusted Data (CWE-502)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"availabilityRequirement\":\"NOT_DEFINED\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"environmentalScore\":9.8,\"environmentalSeverity\":\"CRITICAL\",\"exploitCodeMaturity\":\"NOT_DEFINED\",\"integrityImpact\":\"HIGH\",\"integrityRequirement\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"LOW\",\"modifiedAttackVector\":\"NETWORK\",\"modifiedAvailabilityImpact\":\"HIGH\",\"modifiedConfidentialityImpact\":\"HIGH\",\"modifiedIntegrityImpact\":\"HIGH\",\"modifiedPrivilegesRequired\":\"NONE\",\"modifiedScope\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NONE\",\"privilegesRequired\":\"NONE\",\"remediationLevel\":\"NOT_DEFINED\",\"reportConfidence\":\"NOT_DEFINED\",\"scope\":\"UNCHANGED\",\"temporalScore\":9.8,\"temporalSeverity\":\"CRITICAL\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-38203:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "sourcePath": "retained:/originalText", "text": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-38203:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "modifiedAt": "2024-01-08T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:42.563Z", "fetchedAt": "2026-10-24T08:04:14.526Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-01-08T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "ColdFusionにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:04:14.526Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d714a1e29b790e1b6a52649cdb585fe640322bb2c7cf4a7940bdadc8d7f170f6", "sourceModifiedAt": "2025-10-21T23:05:42.563Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Adobe ColdFusion の 2018u17 以前、2021u7 以前、2023u1 以前のバージョンは、信頼できないデータの逆シリアライズに起因する脆弱性があり、任意のコードを実行できる可能性があります。この脆弱性の悪用にはユーザーの操作は不要です。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で任意のコードが実行される恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "悪用にはユーザーの操作は不要であり、対象となるのは上記バージョンの Adobe ColdFusion です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Adobe / ColdFusion。影響ありとして記載：cf2023U1以下の版。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ColdFusion」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-38203", "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "https://nvd.nist.gov/vuln/detail/CVE-2023-38203" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-38203」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-38203", "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "https://nvd.nist.gov/vuln/detail/CVE-2023-38203" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-38203", "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "https://nvd.nist.gov/vuln/detail/CVE-2023-38203" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-38203", "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "https://nvd.nist.gov/vuln/detail/CVE-2023-38203" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-38203", "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "https://nvd.nist.gov/vuln/detail/CVE-2023-38203" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-38203", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38203", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourceField": "/containers/cna/title", "excerpt": "Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38203.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"ColdFusion\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"cf2023U1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38203", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-38203\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-38203（ColdFusion）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・悪用にはユーザーの操作は不要であり、対象となるのは上記バージョンの Adobe ColdFusion です。\n・公式の対象表：Adobe / ColdFusion。影響ありとして記載：cf2023U1以下の版。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-38203", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:04:14.526Z", "lastSuccess": "2026-10-24T08:04:14.526Z", "sourceCheckedAt": "2026-10-24T08:04:14.526Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-41990", "aliases": [], "title": "iOS and iPadOS / tvOS / macOS / watchOS：コード実行", "summary": "フォントファイルを処理する際に、任意のコードを実行できる脆弱性があり、Apple は iOS 15.7.1 より前の iOS バージョンでこの問題が実際に悪用されたとの報告を認識しています。また、この問題は tvOS 16.3、iOS 16.3、iPadOS 16.3、macOS Monterey 12.6.8、macOS Big Sur 11.7.9、iOS 15.7.8、iPadOS 15.7.8、macOS Ventura 13.2、watchOS 9.3 で修正されています。", "risk": "フォントファイルを処理させられることで、攻撃者が任意のコードを実行させられる可能性があります。", "product": "iOS and iPadOS / tvOS / macOS / watchOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "iOS and iPadOS", "range": ">= unspecified / < 16.3" }, { "product": "tvOS", "range": ">= unspecified / < 16.3" }, { "product": "iOS and iPadOS", "range": ">= unspecified / < 15.7" }, { "product": "macOS", "range": ">= unspecified / < 11.7" }, { "product": "macOS", "range": ">= unspecified / < 13.2" }, { "product": "macOS", "range": ">= unspecified / < 12.6" }, { "product": "watchOS", "range": ">= unspecified / < 9.3" } ], "fixed": [], "steps": [ "また、この問題は tvOS 16.3、iOS 16.3、iPadOS 16.3、macOS Monterey 12.6.8、macOS Big Sur 11.7.9、iOS 15.7.8、iPadOS 15.7.8、macOS Ventura 13.2、watchOS 9.3 で修正されています。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41990", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213606", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213601", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213842", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213845", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213605", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213844", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213599", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-11T23:29:26.660Z", "modifiedAt": "2025-10-21T23:05:38.586Z", "fetchedAt": "2026-10-24T05:22:47.929Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "16.3", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "tvOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "16.3", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "15.7", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "11.7", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "13.2", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "12.6", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "watchOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "9.3", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41990", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "fetchedAt": "2026-10-24T05:22:47.929Z", "publishedAt": "2023-09-11T23:29:26.660Z", "modifiedAt": "2025-10-21T23:05:38.586Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "16.3", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "tvOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "16.3", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "lessThan": "15.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "unspecified", "lessThan": "11.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "unspecified", "lessThan": "13.2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/5", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "unspecified", "lessThan": "12.6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "watchOS", "sourcePath": "/containers/cna/affected/6", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "unspecified", "lessThan": "9.3", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT213606", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://support.apple.com/en-us/HT213601", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://support.apple.com/en-us/HT213842", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://support.apple.com/en-us/HT213845", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://support.apple.com/en-us/HT213605", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://support.apple.com/en-us/HT213844", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://support.apple.com/en-us/HT213599", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41990", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.3\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.3\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"15.7\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"11.7\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"13.2\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"12.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"9.3\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41990:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41990:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "modifiedAt": "2024-01-08T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:38.586Z", "fetchedAt": "2026-10-24T05:22:47.929Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-01-08T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "iOS and iPadOS / tvOS / macOS / watchOSにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:22:47.929Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2124804c82a8301e19afac67166d5080508fcca5b2a02bfed61981030efc7109", "sourceModifiedAt": "2025-10-21T23:05:38.586Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "フォントファイルを処理する際に、任意のコードを実行できる脆弱性があり、Apple は iOS 15.7.1 より前の iOS バージョンでこの問題が実際に悪用されたとの報告を認識しています。また、この問題は tvOS 16.3、iOS 16.3、iPadOS 16.3、macOS Monterey 12.6.8、macOS Big Sur 11.7.9、iOS 15.7.8、iPadOS 15.7.8、macOS Ventura 13.2、watchOS 9.3 で修正されています。", "risk": "フォントファイルを処理させられることで、攻撃者が任意のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.3未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Apple / tvOS。影響ありとして記載：16.3未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：15.7未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：11.7未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：13.2未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：12.6未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Apple / watchOS。影響ありとして記載：9.3未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E8" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E2" ] }, { "text": "「iOS and iPadOS / tvOS / macOS / watchOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41990", "https://support.apple.com/en-us/HT213606", "https://support.apple.com/en-us/HT213601", "https://support.apple.com/en-us/HT213842", "https://support.apple.com/en-us/HT213845", "https://support.apple.com/en-us/HT213605", "https://support.apple.com/en-us/HT213844", "https://support.apple.com/en-us/HT213599", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990" ] } ], "actions": [ { "text": "また、この問題は tvOS 16.3、iOS 16.3、iPadOS 16.3、macOS Monterey 12.6.8、macOS Big Sur 11.7.9、iOS 15.7.8、iPadOS 15.7.8、macOS Ventura 13.2、watchOS 9.3 で修正されています。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41990", "https://support.apple.com/en-us/HT213606", "https://support.apple.com/en-us/HT213601", "https://support.apple.com/en-us/HT213842", "https://support.apple.com/en-us/HT213845", "https://support.apple.com/en-us/HT213605", "https://support.apple.com/en-us/HT213844", "https://support.apple.com/en-us/HT213599", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41990", "https://support.apple.com/en-us/HT213606", "https://support.apple.com/en-us/HT213601", "https://support.apple.com/en-us/HT213842", "https://support.apple.com/en-us/HT213845", "https://support.apple.com/en-us/HT213605", "https://support.apple.com/en-us/HT213844", "https://support.apple.com/en-us/HT213599", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41990", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213606", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213601", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213842", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213845", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213605", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213844", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213599", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.3\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.3\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"15.7\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"11.7\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"13.2\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"12.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41990.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"9.3\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41990", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41990\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41990（iOS and iPadOS / tvOS / macOS / watchOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.3未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / tvOS。影響ありとして記載：16.3未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：15.7未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：11.7未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：13.2未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：12.6未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / watchOS。影響ありとして記載：9.3未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41990", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:22:47.929Z", "lastSuccess": "2026-10-24T05:22:47.929Z", "sourceCheckedAt": "2026-10-24T05:22:47.929Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-7024", "aliases": [], "title": "Chrome：脆弱性情報", "summary": "Google Chrome の 120.0.6099.129 より前のバージョンにある WebRTC のヒープバッファオーバーフローにより、リモートの攻撃者が細工した HTML ページを使ってヒープの破損を引き起こす可能性があります。", "risk": "ヒープの破損が発生し、システムの安定性やセキュリティに影響を与える可能性があります。", "product": "Chrome", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 120.0.6099.129 / < 120.0.6099.129" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2023-7024」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-7024", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "label": "CISAが示す関連情報" }, { "url": "https://crbug.com/1513170", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5585", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "label": "CVE掲載の参考情報" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7024", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-21T22:26:41.147Z", "modifiedAt": "2025-10-21T23:05:29.655Z", "fetchedAt": "2026-10-24T08:12:59.693Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "120.0.6099.129", "status": "affected", "lessThan": "120.0.6099.129", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-7024", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "fetchedAt": "2026-10-24T08:12:59.693Z", "publishedAt": "2023-12-21T22:26:41.147Z", "modifiedAt": "2025-10-21T23:05:29.655Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "120.0.6099.129", "lessThan": "120.0.6099.129", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Heap buffer overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://crbug.com/1513170", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.debian.org/security/2023/dsa-5585", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-7024", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"120.0.6099.129\",\"status\":\"affected\",\"lessThan\":\"120.0.6099.129\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Heap buffer overflow\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-7024:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "sourcePath": "retained:/originalText", "text": "Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-7024:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "modifiedAt": "2024-01-02T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:29.655Z", "fetchedAt": "2026-10-24T08:12:59.693Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-01-02T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chromeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:12:59.693Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7badd9891a309e05dff1de49d0b0773a4e8dcecf8dbfea44f12a2dd0f09dc958", "sourceModifiedAt": "2025-10-21T23:05:29.655Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome の 120.0.6099.129 より前のバージョンにある WebRTC のヒープバッファオーバーフローにより、リモートの攻撃者が細工した HTML ページを使ってヒープの破損を引き起こす可能性があります。", "risk": "ヒープの破損が発生し、システムの安定性やセキュリティに影響を与える可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Google Chrome のバージョン 120.0.6099.129 未満で、WebRTC が有効になっている環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json" ], "evidenceIds": [ "E1" ] }, { "text": "リモートの攻撃者が細工した HTML ページを閲覧させることができる状況。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも120.0.6099.129で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7024", "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "https://crbug.com/1513170", "https://www.debian.org/security/2023/dsa-5585", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "https://nvd.nist.gov/vuln/detail/CVE-2023-7024" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024" ], "evidenceIds": [ "E3" ] }, { "text": "「CVE-2023-7024」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-7024", "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "https://crbug.com/1513170", "https://www.debian.org/security/2023/dsa-5585", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "https://nvd.nist.gov/vuln/detail/CVE-2023-7024" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7024", "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "https://crbug.com/1513170", "https://www.debian.org/security/2023/dsa-5585", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "https://nvd.nist.gov/vuln/detail/CVE-2023-7024" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-7024", "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "https://crbug.com/1513170", "https://www.debian.org/security/2023/dsa-5585", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "https://nvd.nist.gov/vuln/detail/CVE-2023-7024" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7024", "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "https://crbug.com/1513170", "https://www.debian.org/security/2023/dsa-5585", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "https://nvd.nist.gov/vuln/detail/CVE-2023-7024" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-7024", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html", "label": "CISAが示す関連情報" }, { "url": "https://crbug.com/1513170", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5585", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JL4VHZMHFGEGQYTF74533ZNRWMCMMR/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6M6AJDHUL6EDPURWQXGLUFJNDE7SOJT3/", "label": "CVE掲載の参考情報" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7024", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7024.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"120.0.6099.129\",\"status\":\"affected\",\"lessThan\":\"120.0.6099.129\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7024", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-7024\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-7024（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Google Chrome のバージョン 120.0.6099.129 未満で、WebRTC が有効になっている環境。\n・リモートの攻撃者が細工した HTML ページを閲覧させることができる状況。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも120.0.6099.129で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-7024", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:12:59.693Z", "lastSuccess": "2026-10-24T08:12:59.693Z", "sourceCheckedAt": "2026-10-24T08:12:59.693Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-7101", "aliases": [], "title": "Spreadsheet::ParseExcel：コード実行", "summary": "Spreadsheet::ParseExcel バージョン0.65 は、Excel ファイルを解析する Perl モジュールですが、ファイルからの未検証入力を文字列型の eval に渡すため、任意コード実行（ACE）脆弱性があります。具体的には、Excel の数値書式文字列の評価処理が原因です。", "risk": "攻撃者が遠隔から任意のコードを実行できる可能性があります。", "product": "Spreadsheet::ParseExcel", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Mandiant", "cvssVector": null, "affected": [ { "product": "Spreadsheet::ParseExcel", "range": "0.65" }, { "product": "Spreadsheet::ParseExcel", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "バージョン0.66に更新してください。", "「CVE-2023-7101」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "label": "CVE：Mandiant" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-7101", "label": "CVE公式レコード" }, { "url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "label": "CVE掲載の参考情報" }, { "url": "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "label": "CVE掲載の参考情報" }, { "url": "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "label": "CVE掲載の参考情報" }, { "url": "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/29/4", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "label": "CVE掲載の参考情報" }, { "url": "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "label": "CVE掲載の参考情報" }, { "url": "https://metacpan.org/dist/Spreadsheet-ParseExcel", "label": "CISAが示す関連情報" }, { "url": "https://www.barracuda.com/company/legal/esg-vulnerability", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7101", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-24T21:34:46.527Z", "modifiedAt": "2025-10-21T23:05:29.481Z", "fetchedAt": "2026-10-24T05:22:49.088Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.", "sourceTitle": "Arbitrary Code Execution (ACE) Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "collectionURL": "https://metacpan.org/pod/Spreadsheet::ParseExcel", "defaultStatus": "affected", "packageName": "Spreadsheet::ParseExcel", "product": "Spreadsheet::ParseExcel", "repo": "https://metacpan.org/release/DOUGW/Spreadsheet-ParseExcel-0.65/source/lib/Spreadsheet", "vendor": "Douglas Wilson", "versions": [ { "status": "affected", "version": "0.65" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-7101", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "fetchedAt": "2026-10-24T05:22:49.088Z", "publishedAt": "2023-12-24T21:34:46.527Z", "modifiedAt": "2025-10-21T23:05:29.481Z", "state": "published", "provider": "Mandiant", "title": "Arbitrary Code Execution (ACE) Vulnerability", "descriptions": [ { "lang": "en", "value": "Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Douglas Wilson", "product": "Spreadsheet::ParseExcel", "sourcePath": "/containers/cna/affected/0", "packageName": "Spreadsheet::ParseExcel", "collectionURL": "https://metacpan.org/pod/Spreadsheet::ParseExcel", "repo": "https://metacpan.org/release/DOUGW/Spreadsheet-ParseExcel-0.65/source/lib/Spreadsheet", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0.65", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Update to version 0.66", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-95", "lang": "en", "description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/29/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/9" }, { "url": "https://security.metacpan.org/2024/02/10/vulnerable-spreadsheet-parsing-modules.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/10" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-7101", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"collectionURL\":\"https://metacpan.org/pod/Spreadsheet::ParseExcel\",\"defaultStatus\":\"affected\",\"packageName\":\"Spreadsheet::ParseExcel\",\"product\":\"Spreadsheet::ParseExcel\",\"repo\":\"https://metacpan.org/release/DOUGW/Spreadsheet-ParseExcel-0.65/source/lib/Spreadsheet\",\"vendor\":\"Douglas Wilson\",\"versions\":[{\"status\":\"affected\",\"version\":\"0.65\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update to version 0.66", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-95\",\"description\":\"CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-7101:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "sourcePath": "retained:/originalText", "text": "Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-7101:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "modifiedAt": "2024-01-02T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:29.481Z", "fetchedAt": "2026-10-24T05:22:49.088Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-01-02T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Spreadsheet::ParseExcelにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:22:49.088Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "1c8532a057a8157e8e4c54789fd6b9536f095810df5d8d0dd1770b7fc996fbba", "sourceModifiedAt": "2025-10-21T23:05:29.481Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Spreadsheet::ParseExcel バージョン0.65 は、Excel ファイルを解析する Perl モジュールですが、ファイルからの未検証入力を文字列型の eval に渡すため、任意コード実行（ACE）脆弱性があります。具体的には、Excel の数値書式文字列の評価処理が原因です。", "risk": "攻撃者が遠隔から任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "対象は Spreadsheet::ParseExcel バージョン0.65 の Perl モジュールで、Excel ファイルの数値書式文字列を解析する際に発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Douglas Wilson / Spreadsheet::ParseExcel。影響ありとして記載：0.65。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Spreadsheet::ParseExcel」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7101", "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "http://www.openwall.com/lists/oss-security/2023/12/29/4", "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "https://metacpan.org/dist/Spreadsheet-ParseExcel", "https://www.barracuda.com/company/legal/esg-vulnerability", "https://nvd.nist.gov/vuln/detail/CVE-2023-7101" ] } ], "actions": [ { "text": "バージョン0.66に更新してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2023-7101」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-7101", "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "http://www.openwall.com/lists/oss-security/2023/12/29/4", "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "https://metacpan.org/dist/Spreadsheet-ParseExcel", "https://www.barracuda.com/company/legal/esg-vulnerability", "https://nvd.nist.gov/vuln/detail/CVE-2023-7101" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7101", "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "http://www.openwall.com/lists/oss-security/2023/12/29/4", "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "https://metacpan.org/dist/Spreadsheet-ParseExcel", "https://www.barracuda.com/company/legal/esg-vulnerability", "https://nvd.nist.gov/vuln/detail/CVE-2023-7101" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策がない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7101", "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "http://www.openwall.com/lists/oss-security/2023/12/29/4", "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "https://metacpan.org/dist/Spreadsheet-ParseExcel", "https://www.barracuda.com/company/legal/esg-vulnerability", "https://nvd.nist.gov/vuln/detail/CVE-2023-7101" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "label": "CVE：Mandiant" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-7101", "label": "CVE公式レコード" }, { "url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md", "label": "CVE掲載の参考情報" }, { "url": "https://https//www.cve.org/CVERecord?id=CVE-2023-7101", "label": "CVE掲載の参考情報" }, { "url": "https://https//metacpan.org/dist/Spreadsheet-ParseExcel", "label": "CVE掲載の参考情報" }, { "url": "https://https//github.com/haile01/perl_spreadsheet_excel_rce_poc", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/29/4", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html", "label": "CVE掲載の参考情報" }, { "url": "https://https//github.com/jmcnamara/spreadsheet-parseexcel/commit/bd3159277e745468e2c553417b35d5d7dc7405bc", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/", "label": "CVE掲載の参考情報" }, { "url": "https://metacpan.org/dist/Spreadsheet-ParseExcel", "label": "CISAが示す関連情報" }, { "url": "https://www.barracuda.com/company/legal/esg-vulnerability", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7101", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourceField": "/containers/cna/title", "excerpt": "Arbitrary Code Execution (ACE) Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "sourceField": "retained:/originalText", "excerpt": "Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"collectionURL\":\"https://metacpan.org/pod/Spreadsheet::ParseExcel\",\"defaultStatus\":\"affected\",\"packageName\":\"Spreadsheet::ParseExcel\",\"product\":\"Spreadsheet::ParseExcel\",\"repo\":\"https://metacpan.org/release/DOUGW/Spreadsheet-ParseExcel-0.65/source/lib/Spreadsheet\",\"vendor\":\"Douglas Wilson\",\"versions\":[{\"status\":\"affected\",\"version\":\"0.65\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7101.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update to version 0.66", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7101", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-7101\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-7101（Spreadsheet::ParseExcel）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Spreadsheet::ParseExcel バージョン0.65 の Perl モジュールで、Excel ファイルの数値書式文字列を解析する際に発生します。\n・公式の対象表：Douglas Wilson / Spreadsheet::ParseExcel。影響ありとして記載：0.65。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-7101", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:22:49.088Z", "lastSuccess": "2026-10-24T05:22:49.088Z", "sourceCheckedAt": "2026-10-24T05:22:49.088Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-47565", "aliases": [], "title": "VioStor NVR：コード実行", "summary": "レガシーな QNAP VioStor NVR のモデルで、QVR Firmware 4.x を使用しているものに OS コマンドインジェクションの脆弱性が見つかりました。攻撃が成功すると、認証されたユーザーがネットワーク経由でコマンドを実行できる可能性があります。", "risk": "認証されたユーザーがネットワークを通じてコマンドを実行できるようになるため、システムが不正に操作される恐れがあります。", "product": "VioStor NVR", "category": "other", "component": "package", "severity": "high", "cvss": 8, "cvssVersion": "3.1", "cvssSource": "qnap", "cvssVector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "VioStor NVR", "range": ">= 4.x / < 5.0.0（環境: QVR Firmware）" } ], "fixed": [], "steps": [ "QVR Firmware 5.0.0 以降にアップデートしてください。", "「CVE-2023-47565」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "label": "CVE：qnap" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-47565", "label": "CVE公式レコード" }, { "url": "https://www.qnap.com/en/security-advisory/qsa-23-48", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47565", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-08T16:06:29.861Z", "modifiedAt": "2025-10-21T23:05:29.811Z", "fetchedAt": "2026-10-24T05:22:53.989Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "sourceTitle": "Legacy VioStor NVR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "QVR Firmware" ], "product": "VioStor NVR", "vendor": "QNAP Systems Inc.", "versions": [ { "lessThan": "5.0.0", "status": "affected", "version": "4.x", "versionType": "custom" } ] } ], "configurationNotes": "対象環境・機能: QVR Firmware。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-47565", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "fetchedAt": "2026-10-24T05:22:53.989Z", "publishedAt": "2023-12-08T16:06:29.861Z", "modifiedAt": "2025-10-21T23:05:29.811Z", "state": "published", "provider": "qnap", "title": "Legacy VioStor NVR", "descriptions": [ { "lang": "en", "value": "An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "QNAP Systems Inc.", "product": "VioStor NVR", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "QVR Firmware" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "4.x", "lessThan": "5.0.0", "versionType": "custom", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "We have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8, "baseSeverity": "HIGH", "provider": "qnap", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.qnap.com/en/security-advisory/qsa-23-48", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-47565", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"QVR Firmware\"],\"product\":\"VioStor NVR\",\"vendor\":\"QNAP Systems Inc.\",\"versions\":[{\"lessThan\":\"5.0.0\",\"status\":\"affected\",\"version\":\"4.x\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "We have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-78\",\"description\":\"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"ADJACENT_NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-47565:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "sourcePath": "retained:/originalText", "text": "QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-47565:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "modifiedAt": "2023-12-21T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:29.811Z", "fetchedAt": "2026-10-24T05:22:53.989Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-21T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "VioStor NVRにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:22:53.989Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e42144008148c7a004a9e72cd824fc50731ca6b0f2a1e99fe0adcaa595fa308f", "sourceModifiedAt": "2025-10-21T23:05:29.811Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "レガシーな QNAP VioStor NVR のモデルで、QVR Firmware 4.x を使用しているものに OS コマンドインジェクションの脆弱性が見つかりました。攻撃が成功すると、認証されたユーザーがネットワーク経由でコマンドを実行できる可能性があります。", "risk": "認証されたユーザーがネットワークを通じてコマンドを実行できるようになるため、システムが不正に操作される恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は QNAP の VioStor NVR で、QVR Firmware 4.x を搭載したレガシーモデルです。攻撃には認証されたユーザーであることが必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "公式の対象表：QNAP Systems Inc. / VioStor NVR。影響ありとして記載：4系のうち、5.0.0未満。対象の環境：QVR Firmware", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json" ], "evidenceIds": [ "E3" ] }, { "text": "「VioStor NVR」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-47565", "https://www.qnap.com/en/security-advisory/qsa-23-48", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "https://nvd.nist.gov/vuln/detail/CVE-2023-47565" ] } ], "actions": [ { "text": "QVR Firmware 5.0.0 以降にアップデートしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-47565」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-47565", "https://www.qnap.com/en/security-advisory/qsa-23-48", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "https://nvd.nist.gov/vuln/detail/CVE-2023-47565" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-47565", "https://www.qnap.com/en/security-advisory/qsa-23-48", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "https://nvd.nist.gov/vuln/detail/CVE-2023-47565" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565" ], "evidenceIds": [ "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-47565", "https://www.qnap.com/en/security-advisory/qsa-23-48", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "https://nvd.nist.gov/vuln/detail/CVE-2023-47565" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "label": "CVE：qnap" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-47565", "label": "CVE公式レコード" }, { "url": "https://www.qnap.com/en/security-advisory/qsa-23-48", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47565", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourceField": "/containers/cna/title", "excerpt": "Legacy VioStor NVR", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"QVR Firmware\"],\"product\":\"VioStor NVR\",\"vendor\":\"QNAP Systems Inc.\",\"versions\":[{\"lessThan\":\"5.0.0\",\"status\":\"affected\",\"version\":\"4.x\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/47xxx/CVE-2023-47565.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "We have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0 and later", "language": "en", "representation": "source_excerpt" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-47565", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-47565\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-47565（VioStor NVR）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は QNAP の VioStor NVR で、QVR Firmware 4.x を搭載したレガシーモデルです。攻撃には認証されたユーザーであることが必要です。\n・公式の対象表：QNAP Systems Inc. / VioStor NVR。影響ありとして記載：4系のうち、5.0.0未満。対象の環境：QVR Firmware\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-47565", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:22:53.989Z", "lastSuccess": "2026-10-24T05:22:53.989Z", "sourceCheckedAt": "2026-10-24T05:22:53.989Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-49897", "aliases": [], "title": "AE1021PE / AE1021：コード実行", "summary": "AE1021PE および AE1021 のファームウェア 2.0.9 以前に OS コマンドインジェクションの脆弱性があり、製品にログインできる攻撃者が任意の OS コマンドを実行できる可能性があります。", "risk": "当該製品にログイン可能な攻撃者によって、任意の OS コマンドが実行される可能性があります。", "product": "AE1021PE / AE1021", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "jpcert", "cvssVector": null, "affected": [ { "product": "AE1021PE", "range": "2.0.9 and earlier" }, { "product": "AE1021", "range": "2.0.9 and earlier" } ], "fixed": [], "steps": [ "ファームウェアを 2.0.10 にアップデートし、工場出荷時設定をリセットして管理画面ログイン用パスワードを初期設定から変更してください。", "「CVE-2023-49897」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://jvn.jp/vu/JVNVU92152057/", "label": "CVE：jpcert" }, { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "label": "CVE：jpcert" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "label": "CVE掲載の参考情報" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-49897", "label": "CVE公式レコード" }, { "url": "https://www.fxc.jp/news/20231206", "label": "CISAが示す関連情報" }, { "url": "https://jvn.jp/en/vu/JVNVU92152057/", "label": "CVE掲載の参考情報" }, { "url": "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49897", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-06T06:49:41.752Z", "modifiedAt": "2025-10-21T23:05:29.972Z", "fetchedAt": "2026-10-24T05:23:03.906Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "FXC Inc.", "product": "AE1021PE", "versions": [ { "version": "2.0.9 and earlier", "status": "affected" } ] }, { "vendor": "FXC Inc.", "product": "AE1021", "versions": [ { "version": "2.0.9 and earlier", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-49897", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "fetchedAt": "2026-10-24T05:23:03.906Z", "publishedAt": "2023-12-06T06:49:41.752Z", "modifiedAt": "2025-10-21T23:05:29.972Z", "state": "published", "provider": "jpcert", "title": "", "descriptions": [ { "lang": "en", "value": "An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "FXC Inc.", "product": "AE1021PE", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2.0.9 and earlier", "status": "affected" } ] }, { "vendor": "FXC Inc.", "product": "AE1021", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "2.0.9 and earlier", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "OS command injection", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.fxc.jp/news/20231206", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://jvn.jp/en/vu/JVNVU92152057/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49897", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"FXC Inc.\",\"product\":\"AE1021PE\",\"versions\":[{\"version\":\"2.0.9 and earlier\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"FXC Inc.\",\"product\":\"AE1021\",\"versions\":[{\"version\":\"2.0.9 and earlier\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"OS command injection\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-49897:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "sourcePath": "retained:/originalText", "text": "FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-49897:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "FXC AE1021/AE1021PE | CISA\n\n1. EXECUTIVE SUMMARY\n\nCVSS v3 8.0\n\nATTENTION : Exploitable remotely/low attack complexity/public exploits are available/known public exploitation\n\nVendor : FXC\n\nEquipment : AE1021, AE1021PE\n\nVulnerability : OS Command Injection\n\n2. RISK EVALUATION\n\nSuccessful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server settings.\n\n3. TECHNICAL DETAILS\n\n3.1 AFFECTED PRODUCTS\n\nThe following versions of FXC AE1021, a wireless LAN router, are affected:\n\nAE1021PE firmware: version 2.0.9 and earlier\n\nAE1021 firmware: version 2.0.9 and earlier\n\n3.2 Vulnerability Overview\n\n3.2.1 IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN OS COMMAND ('OS COMMAND INJECTION') CWE-78\n\nFXC AE1021/AE1021PE versions 2.0.9 and prior are vulnerable to a code injection that could allow an authenticated user to achieve remote code execution via NTP server settings.\n\nCVE-2023-49897 has been assigned to this vulnerability. A CVSS v3.1 base score of 8.0 has been calculated; the CVSS vector string is ( AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ).\n\n3.3 BACKGROUND\n\nCRITICAL INFRASTRUCTURE SECTORS: Information Technology, Commercial Facilities\n\nCOUNTRIES/AREAS DEPLOYED: Japan\n\nCOMPANY HEADQUARTERS LOCATION: Japan\n\n3.4 RESEARCHER\n\nRyu Kuki, Takayuki Sasaki, and Katsunari Yoshioka of Yokohama National University reported this vulnerability to JPCERT/CC.\n\nChad Seaman and Larry Cashdollar of Akamai Technologies reported this vulnerability to CISA.\n\n4. MITIGATIONS\n\nFXC released the following versions to address this vulnerability:\n\nAE1021PE firmware: version 2.0.10.\n\nAE1021 firmware: version 2.0.10.\n\nFXC recommends users apply the following settings:\n\nReset \"Factory setting\" and change the default management screen login password.\n\nFor more information, see FXC's publication .\n\nFor more information, see JPCERT/CC's security advisory .\n\nCISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:\n\nMinimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet .\n\nLocate control system networks and remote devices behind firewalls and isolating them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics . Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies .\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets .\n\nAdditional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies .\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\nCISA has received reports of this vulnerability being actively exploited.\n\nThis advisory contains a vulnerability that has an associated \"Known Exploited Vulnerabilities\" (KEV) entry. Refer to the following link to view the KEV entry: Known Exploited Vulnerabilities Catalog | CISA\n\n5. UPDATE HISTORY\n\nDecember 21, 2023: Initial Publication\n\nThis product is provided subject to this Notification and this Privacy & Use policy.", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2023-49897", "relatedCves": [ "CVE-2023-49897" ] }, { "evidenceId": "linked:JVNVU92152057:section:概要", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:概要", "text": "FXC株式会社が提供する無線LANルータ「AE1021PE」および「AE1021」には、OSコマンドインジェクションの脆弱性が存在します。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" }, { "evidenceId": "linked:JVNVU92152057:section:影響を受けるシステム", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:影響を受けるシステム", "text": "AE1021PE ファームウェアバージョン 2.0.9 およびそれ以前\n\nAE1021 ファームウェアバージョン 2.0.9 およびそれ以前", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" }, { "evidenceId": "linked:JVNVU92152057:section:詳細情報", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:詳細情報", "text": "FXC株式会社が提供する「AE1021PE」および「AE1021」は、情報コンセント対応型無線LANルータです。\n\n「AE1021PE」および「AE1021」には、OSコマンドインジェクション（ CWE-78 ）の脆弱性が存在します。\n\nなお、JPCERT/CCでは本脆弱性を悪用した通信を確認しています。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" }, { "evidenceId": "linked:JVNVU92152057:section:想定される影響", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:想定される影響", "text": "当該製品にログイン可能な攻撃者によって、任意のOSコマンドを実行される可能性があります。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" }, { "evidenceId": "linked:JVNVU92152057:section:対策方法", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:対策方法", "text": "ファームウェアをアップデートし、適切な設定を行う\n\n開発者から本脆弱性の対策を行ったファームウェア2.0.10がリリースされています。\n\nファームウェアを2.0.10にアップデートした上で、次の設定を行ってください。\n\n「工場出荷時設定」をリセットし、管理画面ログイン用のパスワードを初期設定から変更する\n\n詳細は、開発者が提供する情報を確認してください。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" }, { "evidenceId": "linked:JVNVU92152057:section:ベンダ情報", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:ベンダ情報", "text": "ベンダ\n\nリンク\n\nFXC株式会社\n\nAE1021/AE1021PEのファームウェア Ver2.0.10 公開のお知らせ", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" }, { "evidenceId": "linked:JVNVU92152057:section:参考情報", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourcePath": "section:参考情報", "text": "Actively Exploited Vulnerability in FXC Routers: Fixed, Patches Available\n\nICS Advisory | ICSA-23-355-01\nFXC AE1021/AE1021PE", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-49897", "relatedJvn": "JVNVU92152057" } ], "limits": { "completeness": "official_record_with_linked_advisories", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。 CVEが直接参照しているJVN記事の日本語本文を、記事中のCVE番号を照合して追加しています。", "excludedLinkedSources": [], "excludedJvnSources": [] }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "modifiedAt": "2023-12-21T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "title": "FXC AE1021/AE1021PE | CISA", "relatedCves": [ "CVE-2023-49897" ] }, { "sourceType": "JVN", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "id": "JVNVU92152057", "modifiedAt": "2023-12-21T15:00:00.000Z" } ], "relatedDocuments": [ { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "title": "FXC AE1021/AE1021PE | CISA", "relatedCves": [ "CVE-2023-49897" ], "truncated": false }, { "type": "jvn", "id": "JVNVU92152057", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "modifiedAt": "2023-12-21T15:00:00.000Z", "affectedStatements": [ { "lang": "ja", "value": "AE1021PE ファームウェアバージョン 2.0.9 およびそれ以前\n\nAE1021 ファームウェアバージョン 2.0.9 およびそれ以前", "sourcePath": "section:影響を受けるシステム" } ], "solutions": [ { "lang": "ja", "value": "ファームウェアをアップデートし、適切な設定を行う\n\n開発者から本脆弱性の対策を行ったファームウェア2.0.10がリリースされています。\n\nファームウェアを2.0.10にアップデートした上で、次の設定を行ってください。\n\n「工場出荷時設定」をリセットし、管理画面ログイン用のパスワードを初期設定から変更する\n\n詳細は、開発者が提供する情報を確認してください。", "sourcePath": "section:対策方法" } ] } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:29.972Z", "fetchedAt": "2026-10-24T05:23:03.906Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-21T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "AE1021PE / AE1021にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:03.906Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "63dee4569f1288eb7e294e9176b0d3abca89214458ef116f0754c0d73597c562", "sourceModifiedAt": "2025-10-21T23:05:29.972Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "AE1021PE および AE1021 のファームウェア 2.0.9 以前に OS コマンドインジェクションの脆弱性があり、製品にログインできる攻撃者が任意の OS コマンドを実行できる可能性があります。", "risk": "当該製品にログイン可能な攻撃者によって、任意の OS コマンドが実行される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "攻撃者が製品にログインできることが前提条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "公式の対象表：FXC Inc. / AE1021PE。影響ありとして記載：2.0.9 and earlier。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：FXC Inc. / AE1021。影響ありとして記載：2.0.9 and earlier。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json" ], "evidenceIds": [ "E4" ] }, { "text": "「AE1021PE / AE1021」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-49897", "https://www.fxc.jp/news/20231206", "https://jvn.jp/en/vu/JVNVU92152057/", "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "https://nvd.nist.gov/vuln/detail/CVE-2023-49897" ] } ], "actions": [ { "text": "ファームウェアを 2.0.10 にアップデートし、工場出荷時設定をリセットして管理画面ログイン用パスワードを初期設定から変更してください。", "kind": "fix", "sourceUrls": [ "https://jvn.jp/vu/JVNVU92152057/" ], "evidenceIds": [ "E6" ] }, { "text": "「CVE-2023-49897」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-49897", "https://www.fxc.jp/news/20231206", "https://jvn.jp/en/vu/JVNVU92152057/", "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "https://nvd.nist.gov/vuln/detail/CVE-2023-49897" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-49897", "https://www.fxc.jp/news/20231206", "https://jvn.jp/en/vu/JVNVU92152057/", "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "https://nvd.nist.gov/vuln/detail/CVE-2023-49897" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-49897", "https://www.fxc.jp/news/20231206", "https://jvn.jp/en/vu/JVNVU92152057/", "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "https://nvd.nist.gov/vuln/detail/CVE-2023-49897" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-49897", "https://www.fxc.jp/news/20231206", "https://jvn.jp/en/vu/JVNVU92152057/", "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "https://nvd.nist.gov/vuln/detail/CVE-2023-49897" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://jvn.jp/vu/JVNVU92152057/", "label": "CVE：jpcert" }, { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "label": "CVE：jpcert" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "label": "CVE掲載の参考情報" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-49897", "label": "CVE公式レコード" }, { "url": "https://www.fxc.jp/news/20231206", "label": "CISAが示す関連情報" }, { "url": "https://jvn.jp/en/vu/JVNVU92152057/", "label": "CVE掲載の参考情報" }, { "url": "https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49897", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourceField": "section:想定される影響", "excerpt": "当該製品にログイン可能な攻撃者によって、任意のOSコマンドを実行される可能性があります。", "language": null, "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49897", "sourceField": "retained:/originalText", "excerpt": "FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"FXC Inc.\",\"product\":\"AE1021PE\",\"versions\":[{\"version\":\"2.0.9 and earlier\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49897.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"FXC Inc.\",\"product\":\"AE1021\",\"versions\":[{\"version\":\"2.0.9 and earlier\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://jvn.jp/vu/JVNVU92152057/", "sourceField": "section:対策方法", "excerpt": "ファームウェアをアップデートし、適切な設定を行う\n\n開発者から本脆弱性の対策を行ったファームウェア2.0.10がリリースされています。\n\nファームウェアを2.0.10にアップデートした上で、次の設定を行ってください。\n\n「工場出荷時設定」をリセットし、管理画面ログイン用のパスワードを初期設定から変更する\n\n詳細は、開発者が提供する情報を確認してください。", "language": null, "representation": "source_excerpt" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-49897\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-49897（AE1021PE / AE1021）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が製品にログインできることが前提条件です。\n・公式の対象表：FXC Inc. / AE1021PE。影響ありとして記載：2.0.9 and earlier。\n・公式の対象表：FXC Inc. / AE1021。影響ありとして記載：2.0.9 and earlier。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-49897", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:03.906Z", "lastSuccess": "2026-10-24T05:23:03.906Z", "sourceCheckedAt": "2026-10-24T05:23:03.906Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-6448", "aliases": [], "title": "VisiLogic：脆弱性情報", "summary": "Unitronics VisiLogic のバージョン 9.9.00 未満（Vision および Samba 系列の PLC と HMI）では、デフォルトの管理者パスワードが設定されており、ネットワークに接続できる認証されていない攻撃者がシステムの管理権限を取得できる。", "risk": "攻撃者が管理権限を取得すると、リモートでコマンドを実行できるようになる。", "product": "VisiLogic", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "cisa-cg", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "VisiLogic", "range": "< 9.9.00" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2023-6448」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "label": "CVE掲載の参考情報" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-6448", "label": "CVE公式レコード" }, { "url": "https://www.unitronicsplc.com/cyber_security_vision-samba/", "label": "CVE掲載の参考情報" }, { "url": "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "label": "CVE掲載の参考情報" }, { "url": "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6448", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-05T17:43:40.451Z", "modifiedAt": "2025-10-21T23:05:30.290Z", "fetchedAt": "2026-10-24T05:23:06.873Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.", "sourceTitle": "Unitronics VisiLogic uses a default administrative password", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unknown", "product": "VisiLogic", "vendor": "Unitronics", "versions": [ { "lessThan": "9.9.00", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-6448", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "fetchedAt": "2026-10-24T05:23:06.873Z", "publishedAt": "2023-12-05T17:43:40.451Z", "modifiedAt": "2025-10-21T23:05:30.290Z", "state": "published", "provider": "cisa-cg", "title": "Unitronics VisiLogic uses a default administrative password", "descriptions": [ { "lang": "en", "value": "Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Unitronics", "product": "VisiLogic", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "9.9.00", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1188", "lang": "en", "description": "CWE-1188 Insecure Default Initialization of Resource", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "label": "CVE", "tags": [ "government-resource", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.unitronicsplc.com/cyber_security_vision-samba/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "label": "CVE", "tags": [ "release-notes", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6448", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unknown\",\"product\":\"VisiLogic\",\"vendor\":\"Unitronics\",\"versions\":[{\"lessThan\":\"9.9.00\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-1188\",\"description\":\"CWE-1188 Insecure Default Initialization of Resource\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-6448:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "sourcePath": "retained:/originalText", "text": "Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-6448:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "modifiedAt": "2023-12-11T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:30.290Z", "fetchedAt": "2026-10-24T05:23:06.873Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-11T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "VisiLogicに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:06.873Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9283fafd5d7e93a0dfa5b58b654599a97338f7cf413a0ff087ba6e56ac45a4db", "sourceModifiedAt": "2025-10-21T23:05:30.290Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Unitronics VisiLogic のバージョン 9.9.00 未満（Vision および Samba 系列の PLC と HMI）では、デフォルトの管理者パスワードが設定されており、ネットワークに接続できる認証されていない攻撃者がシステムの管理権限を取得できる。", "risk": "攻撃者が管理権限を取得すると、リモートでコマンドを実行できるようになる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "対象は Unitronics VisiLogic のバージョン 9.9.00 未満で、Vision 系列および Samba 系列の PLC と HMI に限定され、デフォルトの管理者パスワードが変更されていない状態で、ネットワークに接続できる認証されていない攻撃者が存在する場合に脆弱性が成立する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json" ], "evidenceIds": [ "E1", "E4", "E2" ] }, { "text": "公式の対象表：Unitronics / VisiLogic。影響ありとして記載：9.9.00未満の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json" ], "evidenceIds": [ "E4" ] }, { "text": "「VisiLogic」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-6448", "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "https://www.unitronicsplc.com/cyber_security_vision-samba/", "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "https://nvd.nist.gov/vuln/detail/CVE-2023-6448" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2023-6448」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-6448", "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "https://www.unitronicsplc.com/cyber_security_vision-samba/", "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "https://nvd.nist.gov/vuln/detail/CVE-2023-6448" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-6448", "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "https://www.unitronicsplc.com/cyber_security_vision-samba/", "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "https://nvd.nist.gov/vuln/detail/CVE-2023-6448" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-6448", "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "https://www.unitronicsplc.com/cyber_security_vision-samba/", "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "https://nvd.nist.gov/vuln/detail/CVE-2023-6448" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-6448", "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "https://www.unitronicsplc.com/cyber_security_vision-samba/", "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "https://nvd.nist.gov/vuln/detail/CVE-2023-6448" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "label": "CVE掲載の参考情報" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-6448", "label": "CVE公式レコード" }, { "url": "https://www.unitronicsplc.com/cyber_security_vision-samba/", "label": "CVE掲載の参考情報" }, { "url": "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "label": "CVE掲載の参考情報" }, { "url": "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6448", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourceField": "/containers/cna/title", "excerpt": "Unitronics VisiLogic uses a default administrative password", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "sourceField": "retained:/originalText", "excerpt": "Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6448.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unknown\",\"product\":\"VisiLogic\",\"vendor\":\"Unitronics\",\"versions\":[{\"lessThan\":\"9.9.00\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6448", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-6448\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-6448（VisiLogic）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Unitronics VisiLogic のバージョン 9.9.00 未満で、Vision 系列および Samba 系列の PLC と HMI に限定され、デフォルトの管理者パスワードが変更されていない状態で、ネットワークに接続できる認証されていない攻撃者が存在する場合に脆弱性が成立する。\n・公式の対象表：Unitronics / VisiLogic。影響ありとして記載：9.9.00未満の版。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-6448", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:06.873Z", "lastSuccess": "2026-10-24T05:23:06.873Z", "sourceCheckedAt": "2026-10-24T05:23:06.873Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-41265", "aliases": [], "title": "n/a：脆弱性情報", "summary": "Qlik Sense Enterprise for Windows の May 2023 Patch 3 以前、February 2023 Patch 7 以前、November 2022 Patch 10 以前、August 2022 Patch 12 以前のバージョンに、HTTP リクエストを生の HTTP リクエスト内でトンネリングできる脆弱性があり、リモートの攻撃者が権限を昇格させてバックエンドサーバー上でリポジトリアプリケーションが実行するリクエストを送信できるようになります。", "risk": "攻撃者はバックエンドサーバー上で HTTP リクエストを実行できるため、権限が昇格し、システム上で不正な操作が可能になります。", "product": "Qlik Sense", "category": "other", "component": "package", "severity": "critical", "cvss": 9.6, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N", "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って修正プログラムを適用するか、修正プログラムや緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-41265」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41265", "label": "CVE公式レコード" }, { "url": "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "label": "CVE掲載の参考情報" }, { "url": "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41265", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-08-29T00:00:00.000Z", "modifiedAt": "2026-08-05T03:55:56.330Z", "fetchedAt": "2026-10-24T06:21:44.904Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41265", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "fetchedAt": "2026-10-24T06:21:44.904Z", "publishedAt": "2023-08-29T00:00:00.000Z", "modifiedAt": "2026-08-05T03:55:56.330Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N", "baseScore": 9.6, "baseSeverity": "CRITICAL", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41265", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41265:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "sourcePath": "retained:/originalText", "text": "Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41265:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "modifiedAt": "2023-12-07T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-05T03:55:56.330Z", "fetchedAt": "2026-10-24T06:21:44.904Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-07T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:21:44.904Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "51151ca7499312c3f7d524866258c80ae3aa6b579844e4e59c584f3bed5e9325", "sourceModifiedAt": "2026-08-05T03:55:56.330Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Qlik Sense Enterprise for Windows の May 2023 Patch 3 以前、February 2023 Patch 7 以前、November 2022 Patch 10 以前、August 2022 Patch 12 以前のバージョンに、HTTP リクエストを生の HTTP リクエスト内でトンネリングできる脆弱性があり、リモートの攻撃者が権限を昇格させてバックエンドサーバー上でリポジトリアプリケーションが実行するリクエストを送信できるようになります。", "risk": "攻撃者はバックエンドサーバー上で HTTP リクエストを実行できるため、権限が昇格し、システム上で不正な操作が可能になります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "リモートの攻撃者が HTTP リクエストをトンネリングできる環境で、バックエンドサーバーがリポジトリアプリケーションをホストしていることが必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Qlik Sense」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41265", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "https://nvd.nist.gov/vuln/detail/CVE-2023-41265" ] } ], "actions": [ { "text": "ベンダーの指示に従って修正プログラムを適用するか、修正プログラムや緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-41265」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41265", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "https://nvd.nist.gov/vuln/detail/CVE-2023-41265" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41265", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "https://nvd.nist.gov/vuln/detail/CVE-2023-41265" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41265", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "https://nvd.nist.gov/vuln/detail/CVE-2023-41265" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41265", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "https://nvd.nist.gov/vuln/detail/CVE-2023-41265" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41265", "label": "CVE公式レコード" }, { "url": "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "label": "CVE掲載の参考情報" }, { "url": "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41265", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "sourceField": "retained:/originalText", "excerpt": "Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41265.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41265", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41265\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41265（Qlik Sense）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートの攻撃者が HTTP リクエストをトンネリングできる環境で、バックエンドサーバーがリポジトリアプリケーションをホストしていることが必要です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41265", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:21:44.904Z", "lastSuccess": "2026-10-24T06:21:44.904Z", "sourceCheckedAt": "2026-10-24T06:21:44.904Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-41266", "aliases": [], "title": "n/a：ファイルへの不正アクセス", "summary": "Qlik Sense Enterprise for Windows の特定バージョンにパス・トラバーサル脆弱性があり、認証されていないリモート攻撃者が匿名セッションを生成でき、そのセッションを使って未承認のエンドポイントへ HTTP リクエストを送信できる。これらは August 2023 IR、May 2023 Patch 4、February 2023 Patch 8、November 2022 Patch 11、August 2022 Patch 13 で修正されている。", "risk": "攻撃者は匿名セッションを利用して、未承認のエンドポイントへさらにリクエストを送信できる可能性がある。", "product": "Qlik Sense", "category": "other", "component": "package", "severity": "high", "cvss": 8.2, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N", "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2023-41266」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41266", "label": "CVE公式レコード" }, { "url": "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "label": "CVE掲載の参考情報" }, { "url": "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41266", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-08-29T00:00:00.000Z", "modifiedAt": "2026-08-05T03:55:57.555Z", "fetchedAt": "2026-10-24T06:21:53.988Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41266", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "fetchedAt": "2026-10-24T06:21:53.988Z", "publishedAt": "2023-08-29T00:00:00.000Z", "modifiedAt": "2026-08-05T03:55:57.555Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N", "baseScore": 8.2, "baseSeverity": "HIGH", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41266", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41266:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "sourcePath": "retained:/originalText", "text": "Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41266:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "modifiedAt": "2023-12-07T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-05T03:55:57.555Z", "fetchedAt": "2026-10-24T06:21:53.988Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-07T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "n/aにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:21:53.988Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "706e1126ce11470b139512a9d33c66e1a28b18dcb88a474911e7688ab735b94f", "sourceModifiedAt": "2026-08-05T03:55:57.555Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Qlik Sense Enterprise for Windows の特定バージョンにパス・トラバーサル脆弱性があり、認証されていないリモート攻撃者が匿名セッションを生成でき、そのセッションを使って未承認のエンドポイントへ HTTP リクエストを送信できる。これらは August 2023 IR、May 2023 Patch 4、February 2023 Patch 8、November 2022 Patch 11、August 2022 Patch 13 で修正されている。", "risk": "攻撃者は匿名セッションを利用して、未承認のエンドポイントへさらにリクエストを送信できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "認証されていないリモート攻撃者が匿名セッションを生成できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "生成した匿名セッションで未承認エンドポイントへ HTTP リクエストを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Qlik Sense」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41266", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "https://nvd.nist.gov/vuln/detail/CVE-2023-41266" ] } ], "actions": [ { "text": "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-41266」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41266", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "https://nvd.nist.gov/vuln/detail/CVE-2023-41266" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41266", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "https://nvd.nist.gov/vuln/detail/CVE-2023-41266" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41266", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "https://nvd.nist.gov/vuln/detail/CVE-2023-41266" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41266", "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "https://nvd.nist.gov/vuln/detail/CVE-2023-41266" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41266", "label": "CVE公式レコード" }, { "url": "https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes", "label": "CVE掲載の参考情報" }, { "url": "https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41266", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "sourceField": "retained:/originalText", "excerpt": "Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41266.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41266", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41266\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41266（Qlik Sense）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないリモート攻撃者が匿名セッションを生成できること。\n・生成した匿名セッションで未承認エンドポイントへ HTTP リクエストを送信できること。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41266", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:21:53.988Z", "lastSuccess": "2026-10-24T06:21:53.988Z", "sourceCheckedAt": "2026-10-24T06:21:53.988Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2022-22071", "aliases": [], "title": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music：脆弱性情報", "summary": "Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music において、プロセスの初期化中に IOCTL の munmap 呼び出しでシェルメモリが解放されると、メモリが解放された後に不正に使用される可能性があります。", "risk": "メモリが解放された後に不正に使用される可能性がある。", "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "category": "other", "component": "package", "severity": "high", "cvss": 8.4, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "range": "APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN361" } ], "fixed": [], "steps": [ "ベンダーの指示に従って修正策や緩和策を適用するか、修正策や緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2022-22071」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-22071", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22071", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2022-06-14T09:51:15.000Z", "modifiedAt": "2025-10-21T23:15:38.616Z", "fetchedAt": "2026-10-24T05:23:07.232Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-22071", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "fetchedAt": "2026-10-24T05:23:07.232Z", "publishedAt": "2022-06-14T09:51:15.000Z", "modifiedAt": "2025-10-21T23:15:38.616Z", "state": "published", "provider": "qualcomm", "title": "", "descriptions": [ { "lang": "en", "value": "Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Use After Free in Automotive OS Platform Android", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22071", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Use After Free in Automotive OS Platform Android\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2022-22071:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2022-22071:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:38.616Z", "fetchedAt": "2026-10-24T05:23:07.232Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musicに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:07.232Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "8bfe9a1f6eb19505c50d5cf5ed8a09c8ca55cfcdb351b6a27438bb224fbb4736", "sourceModifiedAt": "2025-10-21T23:15:38.616Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music において、プロセスの初期化中に IOCTL の munmap 呼び出しでシェルメモリが解放されると、メモリが解放された後に不正に使用される可能性があります。", "risk": "メモリが解放された後に不正に使用される可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "プロセスの初期化が進行中で、IOCTL の munmap 呼び出しによりシェルメモリが解放される状況。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music。影響ありとして記載：APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22071", "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "https://nvd.nist.gov/vuln/detail/CVE-2022-22071" ] } ], "actions": [ { "text": "ベンダーの指示に従って修正策や緩和策を適用するか、修正策や緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2022-22071」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-22071", "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "https://nvd.nist.gov/vuln/detail/CVE-2022-22071" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22071", "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "https://nvd.nist.gov/vuln/detail/CVE-2022-22071" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-22071", "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "https://nvd.nist.gov/vuln/detail/CVE-2022-22071" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22071", "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "https://nvd.nist.gov/vuln/detail/CVE-2022-22071" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-22071", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22071", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "sourceField": "retained:/originalText", "excerpt": "Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22071.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22071", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-22071\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-22071（Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・プロセスの初期化が進行中で、IOCTL の munmap 呼び出しによりシェルメモリが解放される状況。\n・公式の対象表：Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music。影響ありとして記載：APQ8053, AR8031, AR8035, CSRA6620, CSRA6640, MDM9150, MSM8953, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, Qualcomm215, SA6155P, SA8155P, SA8195P, SD439, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM7250P, SM7325P, WCD9326, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-22071", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:07.232Z", "lastSuccess": "2026-10-24T05:23:07.232Z", "sourceCheckedAt": "2026-10-24T05:23:07.232Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-33063", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "HLOS から DSP へのリモート呼び出し中に DSP Services でメモリ破損が発生します。", "risk": "メモリ破損が起こります。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "315 5G IoT Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "APQ8017（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "AQT1000（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "AR8031（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "AR8035（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "AR9380（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "C-V2X 9150（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "CSR8811（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "CSRA6620（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "CSRA6640（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "CSRB31024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "FastConnect 6200（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "FastConnect 6700（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "FastConnect 6800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "FastConnect 6900（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Flight RB5 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Immersive Home 214 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Immersive Home 216 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Immersive Home 316 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Immersive Home 318 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ4018（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ4019（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ4028（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ4029（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ5010（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ6010（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ6018（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ6028（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8064（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8065（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8068（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8070（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8070A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8071A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8072A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8074A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8076（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8076A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8078（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8078A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8173（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "IPQ8174（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "MDM9650（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QAM8255P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QAM8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QAM8650P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QAM8775P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA4024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6174A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6310（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6320（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6335（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6420（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6421（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6426（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6431（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6436（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6564（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6564AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6574（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6574A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6574AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6595（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6595AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6696（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6698AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA6797AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA7500（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA8075（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA8081（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA8337（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9377（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9880（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9886（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9888（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9889（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9898（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9980（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9984（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9985（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9990（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9992（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCA9994（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM2290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM4290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM4325（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM4490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM5430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM6125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCM6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5022（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5052（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5122（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5124（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5152（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5154（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN5164（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN6023（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN6024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9000（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9011（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9012（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9022（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9070（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9072（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9074（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCN9100（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS2290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS410（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS4290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS4490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS5430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS6125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS7230（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS8155（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS8250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QCS8550（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QRB5165M（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QRB5165N（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "QSM8250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Qualcomm 205 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Qualcomm 215 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC5 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Robotics RB3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Robotics RB5 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA4155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA6145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA6150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA6155（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA6155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8155（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8195P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8255P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8770P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA8775P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SA9000P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD 675（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD 8 Gen1 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD626（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD660（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD670（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD675（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD730（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD835（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD855（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD865 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SD888（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SDM429W（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SDX55（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SG4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SG8275P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SM4125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SM6250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SM7250P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SM7315（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SM7325P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SM8550P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Smart Audio 400 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Smart Display 200 Platform (APQ5053-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 210 Processor（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 212 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 425 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 429 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 439 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 460 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 480 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 625 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 626 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 632 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 660 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 662 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 665 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 670 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 675 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 678 Mobile Platform (SM6150-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 690 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 695 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 710 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 720G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 730 Mobile Platform (SM7150-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 730G Mobile Platform (SM7150-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 732G Mobile Platform (SM7150-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 750G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 765 5G Mobile Platform (SM7250-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 778G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 780G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 782G Mobile Platform (SM7325-AF)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 7c+ Gen 3 Compute（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 820 Automotive Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 835 Mobile PC Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 845 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 855 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 865 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 870 5G Mobile Platform (SM8250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 888 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon AR2 Gen 1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 5G Modem-RF（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon W5+ Gen 1 Wearable Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon Wear 4100+ Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon X12 LTE Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon X24 LTE Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon X50 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon X55 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon X65 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon XR1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon XR2 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon XR2+ Gen 1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 4G Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SSG2115P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SSG2125P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SW5100（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SW5100P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SXR1120（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SXR1230P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SXR2130（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "SXR2230P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Vision Intelligence 100 Platform (APQ8053-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Vision Intelligence 200 Platform (APQ8053-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Vision Intelligence 300 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "Vision Intelligence 400 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9326（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9335（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9340（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9341（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9360（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9371（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9380（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9390（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCD9395（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3615（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3620（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3660B（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3680（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3680B（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3910（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3980（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN3990（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WCN6740（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8832（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8840（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8845（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" }, { "product": "Snapdragon", "range": "WSA8845H（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って修正策や緩和策を適用するか、修正策が入手できない場合は製品の使用を中止します。", "「CVE-2023-33063」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33063", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "label": "CISAが示す関連情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33063", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-05T03:04:10.949Z", "modifiedAt": "2025-10-21T23:05:31.211Z", "fetchedAt": "2026-10-24T15:50:52.392Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption in DSP Services during a remote call from HLOS to DSP.", "sourceTitle": "Use After Free in DSP Services", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "315 5G IoT Modem" }, { "status": "affected", "version": "APQ8017" }, { "status": "affected", "version": "AQT1000" }, { "status": "affected", "version": "AR8031" }, { "status": "affected", "version": "AR8035" }, { "status": "affected", "version": "AR9380" }, { "status": "affected", "version": "C-V2X 9150" }, { "status": "affected", "version": "CSR8811" }, { "status": "affected", "version": "CSRA6620" }, { "status": "affected", "version": "CSRA6640" }, { "status": "affected", "version": "CSRB31024" }, { "status": "affected", "version": "FastConnect 6200" }, { "status": "affected", "version": "FastConnect 6700" }, { "status": "affected", "version": "FastConnect 6800" }, { "status": "affected", "version": "FastConnect 6900" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "Flight RB5 5G Platform" }, { "status": "affected", "version": "Immersive Home 214 Platform" }, { "status": "affected", "version": "Immersive Home 216 Platform" }, { "status": "affected", "version": "Immersive Home 316 Platform" }, { "status": "affected", "version": "Immersive Home 318 Platform" }, { "status": "affected", "version": "IPQ4018" }, { "status": "affected", "version": "IPQ4019" }, { "status": "affected", "version": "IPQ4028" }, { "status": "affected", "version": "IPQ4029" }, { "status": "affected", "version": "IPQ5010" }, { "status": "affected", "version": "IPQ6010" }, { "status": "affected", "version": "IPQ6018" }, { "status": "affected", "version": "IPQ6028" }, { "status": "affected", "version": "IPQ8064" }, { "status": "affected", "version": "IPQ8065" }, { "status": "affected", "version": "IPQ8068" }, { "status": "affected", "version": "IPQ8070" }, { "status": "affected", "version": "IPQ8070A" }, { "status": "affected", "version": "IPQ8071A" }, { "status": "affected", "version": "IPQ8072A" }, { "status": "affected", "version": "IPQ8074A" }, { "status": "affected", "version": "IPQ8076" }, { "status": "affected", "version": "IPQ8076A" }, { "status": "affected", "version": "IPQ8078" }, { "status": "affected", "version": "IPQ8078A" }, { "status": "affected", "version": "IPQ8173" }, { "status": "affected", "version": "IPQ8174" }, { "status": "affected", "version": "MDM9650" }, { "status": "affected", "version": "QAM8255P" }, { "status": "affected", "version": "QAM8295P" }, { "status": "affected", "version": "QAM8650P" }, { "status": "affected", "version": "QAM8775P" }, { "status": "affected", "version": "QCA4024" }, { "status": "affected", "version": "QCA6174A" }, { "status": "affected", "version": "QCA6310" }, { "status": "affected", "version": "QCA6320" }, { "status": "affected", "version": "QCA6335" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCA6420" }, { "status": "affected", "version": "QCA6421" }, { "status": "affected", "version": "QCA6426" }, { "status": "affected", "version": "QCA6430" }, { "status": "affected", "version": "QCA6431" }, { "status": "affected", "version": "QCA6436" }, { "status": "affected", "version": "QCA6564" }, { "status": "affected", "version": "QCA6564AU" }, { "status": "affected", "version": "QCA6574" }, { "status": "affected", "version": "QCA6574A" }, { "status": "affected", "version": "QCA6574AU" }, { "status": "affected", "version": "QCA6595" }, { "status": "affected", "version": "QCA6595AU" }, { "status": "affected", "version": "QCA6696" }, { "status": "affected", "version": "QCA6698AQ" }, { "status": "affected", "version": "QCA6797AQ" }, { "status": "affected", "version": "QCA7500" }, { "status": "affected", "version": "QCA8075" }, { "status": "affected", "version": "QCA8081" }, { "status": "affected", "version": "QCA8337" }, { "status": "affected", "version": "QCA9377" }, { "status": "affected", "version": "QCA9880" }, { "status": "affected", "version": "QCA9886" }, { "status": "affected", "version": "QCA9888" }, { "status": "affected", "version": "QCA9889" }, { "status": "affected", "version": "QCA9898" }, { "status": "affected", "version": "QCA9980" }, { "status": "affected", "version": "QCA9984" }, { "status": "affected", "version": "QCA9985" }, { "status": "affected", "version": "QCA9990" }, { "status": "affected", "version": "QCA9992" }, { "status": "affected", "version": "QCA9994" }, { "status": "affected", "version": "QCM2290" }, { "status": "affected", "version": "QCM4290" }, { "status": "affected", "version": "QCM4325" }, { "status": "affected", "version": "QCM4490" }, { "status": "affected", "version": "QCM5430" }, { "status": "affected", "version": "QCM6125" }, { "status": "affected", "version": "QCM6490" }, { "status": "affected", "version": "QCN5022" }, { "status": "affected", "version": "QCN5024" }, { "status": "affected", "version": "QCN5052" }, { "status": "affected", "version": "QCN5122" }, { "status": "affected", "version": "QCN5124" }, { "status": "affected", "version": "QCN5152" }, { "status": "affected", "version": "QCN5154" }, { "status": "affected", "version": "QCN5164" }, { "status": "affected", "version": "QCN6023" }, { "status": "affected", "version": "QCN6024" }, { "status": "affected", "version": "QCN9000" }, { "status": "affected", "version": "QCN9011" }, { "status": "affected", "version": "QCN9012" }, { "status": "affected", "version": "QCN9022" }, { "status": "affected", "version": "QCN9024" }, { "status": "affected", "version": "QCN9070" }, { "status": "affected", "version": "QCN9072" }, { "status": "affected", "version": "QCN9074" }, { "status": "affected", "version": "QCN9100" }, { "status": "affected", "version": "QCS2290" }, { "status": "affected", "version": "QCS410" }, { "status": "affected", "version": "QCS4290" }, { "status": "affected", "version": "QCS4490" }, { "status": "affected", "version": "QCS5430" }, { "status": "affected", "version": "QCS610" }, { "status": "affected", "version": "QCS6125" }, { "status": "affected", "version": "QCS6490" }, { "status": "affected", "version": "QCS7230" }, { "status": "affected", "version": "QCS8155" }, { "status": "affected", "version": "QCS8250" }, { "status": "affected", "version": "QCS8550" }, { "status": "affected", "version": "QRB5165M" }, { "status": "affected", "version": "QRB5165N" }, { "status": "affected", "version": "QSM8250" }, { "status": "affected", "version": "Qualcomm 205 Mobile Platform" }, { "status": "affected", "version": "Qualcomm 215 Mobile Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC1 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC5 Platform" }, { "status": "affected", "version": "Robotics RB3 Platform" }, { "status": "affected", "version": "Robotics RB5 Platform" }, { "status": "affected", "version": "SA4150P" }, { "status": "affected", "version": "SA4155P" }, { "status": "affected", "version": "SA6145P" }, { "status": "affected", "version": "SA6150P" }, { "status": "affected", "version": "SA6155" }, { "status": "affected", "version": "SA6155P" }, { "status": "affected", "version": "SA8145P" }, { "status": "affected", "version": "SA8150P" }, { "status": "affected", "version": "SA8155" }, { "status": "affected", "version": "SA8155P" }, { "status": "affected", "version": "SA8195P" }, { "status": "affected", "version": "SA8255P" }, { "status": "affected", "version": "SA8295P" }, { "status": "affected", "version": "SA8770P" }, { "status": "affected", "version": "SA8775P" }, { "status": "affected", "version": "SA9000P" }, { "status": "affected", "version": "SD 675" }, { "status": "affected", "version": "SD 8 Gen1 5G" }, { "status": "affected", "version": "SD626" }, { "status": "affected", "version": "SD660" }, { "status": "affected", "version": "SD670" }, { "status": "affected", "version": "SD675" }, { "status": "affected", "version": "SD730" }, { "status": "affected", "version": "SD835" }, { "status": "affected", "version": "SD855" }, { "status": "affected", "version": "SD865 5G" }, { "status": "affected", "version": "SD888" }, { "status": "affected", "version": "SDM429W" }, { "status": "affected", "version": "SDX55" }, { "status": "affected", "version": "SG4150P" }, { "status": "affected", "version": "SG8275P" }, { "status": "affected", "version": "SM4125" }, { "status": "affected", "version": "SM6250" }, { "status": "affected", "version": "SM7250P" }, { "status": "affected", "version": "SM7315" }, { "status": "affected", "version": "SM7325P" }, { "status": "affected", "version": "SM8550P" }, { "status": "affected", "version": "Smart Audio 400 Platform" }, { "status": "affected", "version": "Smart Display 200 Platform (APQ5053-AA)" }, { "status": "affected", "version": "Snapdragon 210 Processor" }, { "status": "affected", "version": "Snapdragon 212 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 425 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 429 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 439 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 460 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)" }, { "status": "affected", "version": "Snapdragon 625 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 626 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 632 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 660 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 662 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 665 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 670 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 675 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 678 Mobile Platform (SM6150-AC)" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon 690 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 695 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 710 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 720G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 730 Mobile Platform (SM7150-AA)" }, { "status": "affected", "version": "Snapdragon 730G Mobile Platform (SM7150-AB)" }, { "status": "affected", "version": "Snapdragon 732G Mobile Platform (SM7150-AC)" }, { "status": "affected", "version": "Snapdragon 750G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)" }, { "status": "affected", "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)" }, { "status": "affected", "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)" }, { "status": "affected", "version": "Snapdragon 778G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)" }, { "status": "affected", "version": "Snapdragon 780G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)" }, { "status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute" }, { "status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 820 Automotive Platform" }, { "status": "affected", "version": "Snapdragon 835 Mobile PC Platform" }, { "status": "affected", "version": "Snapdragon 845 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)" }, { "status": "affected", "version": "Snapdragon 865 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)" }, { "status": "affected", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)" }, { "status": "affected", "version": "Snapdragon 888 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)" }, { "status": "affected", "version": "Snapdragon AR2 Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon Auto 5G Modem-RF" }, { "status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform" }, { "status": "affected", "version": "Snapdragon Wear 4100+ Platform" }, { "status": "affected", "version": "Snapdragon X12 LTE Modem" }, { "status": "affected", "version": "Snapdragon X24 LTE Modem" }, { "status": "affected", "version": "Snapdragon X50 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon X55 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon X65 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon XR1 Platform" }, { "status": "affected", "version": "Snapdragon XR2 5G Platform" }, { "status": "affected", "version": "Snapdragon XR2+ Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon Auto 4G Modem" }, { "status": "affected", "version": "SSG2115P" }, { "status": "affected", "version": "SSG2125P" }, { "status": "affected", "version": "SW5100" }, { "status": "affected", "version": "SW5100P" }, { "status": "affected", "version": "SXR1120" }, { "status": "affected", "version": "SXR1230P" }, { "status": "affected", "version": "SXR2130" }, { "status": "affected", "version": "SXR2230P" }, { "status": "affected", "version": "Vision Intelligence 100 Platform (APQ8053-AA)" }, { "status": "affected", "version": "Vision Intelligence 200 Platform (APQ8053-AC)" }, { "status": "affected", "version": "Vision Intelligence 300 Platform" }, { "status": "affected", "version": "Vision Intelligence 400 Platform" }, { "status": "affected", "version": "WCD9326" }, { "status": "affected", "version": "WCD9335" }, { "status": "affected", "version": "WCD9340" }, { "status": "affected", "version": "WCD9341" }, { "status": "affected", "version": "WCD9360" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9371" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9380" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCD9390" }, { "status": "affected", "version": "WCD9395" }, { "status": "affected", "version": "WCN3610" }, { "status": "affected", "version": "WCN3615" }, { "status": "affected", "version": "WCN3620" }, { "status": "affected", "version": "WCN3660B" }, { "status": "affected", "version": "WCN3680" }, { "status": "affected", "version": "WCN3680B" }, { "status": "affected", "version": "WCN3910" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3980" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN3990" }, { "status": "affected", "version": "WCN6740" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8832" }, { "status": "affected", "version": "WSA8835" }, { "status": "affected", "version": "WSA8840" }, { "status": "affected", "version": "WSA8845" }, { "status": "affected", "version": "WSA8845H" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables / Snapdragon Wired Infrastructure and Networking。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-33063", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "fetchedAt": "2026-10-24T15:50:52.392Z", "publishedAt": "2023-12-05T03:04:10.949Z", "modifiedAt": "2025-10-21T23:05:31.211Z", "state": "published", "provider": "qualcomm", "title": "Use After Free in DSP Services", "descriptions": [ { "lang": "en", "value": "Memory corruption in DSP Services during a remote call from HLOS to DSP.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables", "Snapdragon Wired Infrastructure and Networking" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "315 5G IoT Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "APQ8017", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "AQT1000", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "AR8031", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "AR8035", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "AR9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "C-V2X 9150", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "CSR8811", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "CSRA6620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "CSRA6640", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "CSRB31024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "FastConnect 6200", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "FastConnect 6700", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "FastConnect 6800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "FastConnect 6900", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "Flight RB5 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "Immersive Home 214 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "Immersive Home 216 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "Immersive Home 316 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "Immersive Home 318 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "IPQ4018", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "IPQ4019", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "IPQ4028", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "IPQ4029", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "IPQ5010", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "IPQ6010", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "IPQ6018", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "IPQ6028", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "IPQ8064", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "IPQ8065", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "IPQ8068", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "IPQ8070", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "IPQ8070A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "IPQ8071A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "IPQ8072A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "IPQ8074A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "IPQ8076", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "IPQ8076A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "IPQ8078", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "IPQ8078A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "IPQ8173", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "IPQ8174", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "MDM9650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "QAM8255P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "QAM8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "QAM8650P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "QAM8775P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "QCA4024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "QCA6174A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "QCA6310", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "QCA6320", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "QCA6335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "QCA6420", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "QCA6421", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "QCA6426", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "QCA6430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "QCA6431", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "QCA6436", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "QCA6564", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "QCA6564AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "QCA6574", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "QCA6574A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "QCA6574AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "QCA6595", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "QCA6595AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "QCA6696", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "QCA6698AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "QCA6797AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "QCA7500", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "QCA8075", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "QCA8081", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "QCA8337", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "QCA9377", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "QCA9880", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "QCA9886", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "QCA9888", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "QCA9889", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "QCA9898", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "QCA9980", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "QCA9984", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "QCA9985", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "QCA9990", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "QCA9992", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "QCA9994", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "QCM2290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "QCM4290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "QCM4325", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "QCM4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "QCM5430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "QCM6125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "QCM6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "QCN5022", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "QCN5024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "QCN5052", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "QCN5122", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "QCN5124", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "QCN5152", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "QCN5154", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "QCN5164", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "QCN6023", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "QCN6024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "QCN9000", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "QCN9011", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "QCN9012", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "QCN9022", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "QCN9024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "QCN9070", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "QCN9072", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "QCN9074", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "QCN9100", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "QCS2290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "QCS410", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "QCS4290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "QCS4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "QCS5430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "QCS610", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "QCS6125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "QCS6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "QCS7230", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "QCS8155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "QCS8250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "QCS8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "QRB5165M", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "QRB5165N", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "QSM8250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "Qualcomm 205 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "Qualcomm 215 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "Qualcomm Video Collaboration VC1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "Qualcomm Video Collaboration VC3 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "Qualcomm Video Collaboration VC5 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "Robotics RB3 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "Robotics RB5 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "SA4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "SA4155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "SA6145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "SA6150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "SA6155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "SA6155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "SA8145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "SA8150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "SA8155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "SA8155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "SA8195P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "SA8255P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "SA8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "SA8770P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "SA8775P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "SA9000P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "SD 675", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "SD 8 Gen1 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "SD626", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "SD660", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "SD670", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "SD675", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "SD730", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "SD835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "SD855", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "SD865 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "SD888", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "SDM429W", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "SDX55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "SG4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "SG8275P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "SM4125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "SM6250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "SM7250P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "SM7315", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "SM7325P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "SM8550P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "Smart Audio 400 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "Smart Display 200 Platform (APQ5053-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "Snapdragon 210 Processor", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "Snapdragon 212 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "Snapdragon 4 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "Snapdragon 4 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "Snapdragon 425 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "Snapdragon 429 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "Snapdragon 439 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "Snapdragon 460 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "Snapdragon 480 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "Snapdragon 625 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "Snapdragon 626 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "Snapdragon 632 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "Snapdragon 660 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "Snapdragon 662 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "Snapdragon 665 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "Snapdragon 670 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "Snapdragon 675 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "Snapdragon 678 Mobile Platform (SM6150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "Snapdragon 690 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "Snapdragon 695 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "Snapdragon 710 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "Snapdragon 720G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "Snapdragon 730 Mobile Platform (SM7150-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "Snapdragon 730G Mobile Platform (SM7150-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "Snapdragon 732G Mobile Platform (SM7150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "Snapdragon 750G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "Snapdragon 778G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "Snapdragon 780G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "Snapdragon 7c+ Gen 3 Compute", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "Snapdragon 8 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "Snapdragon 8 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "Snapdragon 8+ Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "Snapdragon 8+ Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "Snapdragon 820 Automotive Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "Snapdragon 835 Mobile PC Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "Snapdragon 845 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "Snapdragon 855 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "Snapdragon 865 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "Snapdragon 888 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "Snapdragon AR2 Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "Snapdragon Auto 5G Modem-RF", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "Snapdragon W5+ Gen 1 Wearable Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "Snapdragon Wear 4100+ Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "Snapdragon X12 LTE Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "Snapdragon X24 LTE Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "Snapdragon X50 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "Snapdragon X55 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "Snapdragon X65 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "Snapdragon XR1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "Snapdragon XR2 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/235", "version": "Snapdragon XR2+ Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/236", "version": "Snapdragon Auto 4G Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/237", "version": "SSG2115P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/238", "version": "SSG2125P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/239", "version": "SW5100", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/240", "version": "SW5100P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/241", "version": "SXR1120", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/242", "version": "SXR1230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/243", "version": "SXR2130", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/244", "version": "SXR2230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/245", "version": "Vision Intelligence 100 Platform (APQ8053-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/246", "version": "Vision Intelligence 200 Platform (APQ8053-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/247", "version": "Vision Intelligence 300 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/248", "version": "Vision Intelligence 400 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/249", "version": "WCD9326", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/250", "version": "WCD9335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/251", "version": "WCD9340", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/252", "version": "WCD9341", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/253", "version": "WCD9360", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/254", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/255", "version": "WCD9371", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/256", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/257", "version": "WCD9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/258", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/259", "version": "WCD9390", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/260", "version": "WCD9395", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/261", "version": "WCN3610", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/262", "version": "WCN3615", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/263", "version": "WCN3620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/264", "version": "WCN3660B", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/265", "version": "WCN3680", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/266", "version": "WCN3680B", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/267", "version": "WCN3910", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/268", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/269", "version": "WCN3980", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/270", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/271", "version": "WCN3990", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/272", "version": "WCN6740", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/273", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/274", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/275", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/276", "version": "WSA8832", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/277", "version": "WSA8835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/278", "version": "WSA8840", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/279", "version": "WSA8845", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/280", "version": "WSA8845H", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en", "description": "CWE-416 Use After Free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33063", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Voice & Music\",\"Snapdragon Wearables\",\"Snapdragon Wired Infrastructure and Networking\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"315 5G IoT Modem\"},{\"status\":\"affected\",\"version\":\"APQ8017\"},{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"AR8031\"},{\"status\":\"affected\",\"version\":\"AR8035\"},{\"status\":\"affected\",\"version\":\"AR9380\"},{\"status\":\"affected\",\"version\":\"C-V2X 9150\"},{\"status\":\"affected\",\"version\":\"CSR8811\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"CSRB31024\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"Flight RB5 5G Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 214 Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 216 Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 316 Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 318 Platform\"},{\"status\":\"affected\",\"version\":\"IPQ4018\"},{\"status\":\"affected\",\"version\":\"IPQ4019\"},{\"status\":\"affected\",\"version\":\"IPQ4028\"},{\"status\":\"affected\",\"version\":\"IPQ4029\"},{\"status\":\"affected\",\"version\":\"IPQ5010\"},{\"status\":\"affected\",\"version\":\"IPQ6010\"},{\"status\":\"affected\",\"version\":\"IPQ6018\"},{\"status\":\"affected\",\"version\":\"IPQ6028\"},{\"status\":\"affected\",\"version\":\"IPQ8064\"},{\"status\":\"affected\",\"version\":\"IPQ8065\"},{\"status\":\"affected\",\"version\":\"IPQ8068\"},{\"status\":\"affected\",\"version\":\"IPQ8070\"},{\"status\":\"affected\",\"version\":\"IPQ8070A\"},{\"status\":\"affected\",\"version\":\"IPQ8071A\"},{\"status\":\"affected\",\"version\":\"IPQ8072A\"},{\"status\":\"affected\",\"version\":\"IPQ8074A\"},{\"status\":\"affected\",\"version\":\"IPQ8076\"},{\"status\":\"affected\",\"version\":\"IPQ8076A\"},{\"status\":\"affected\",\"version\":\"IPQ8078\"},{\"status\":\"affected\",\"version\":\"IPQ8078A\"},{\"status\":\"affected\",\"version\":\"IPQ8173\"},{\"status\":\"affected\",\"version\":\"IPQ8174\"},{\"status\":\"affected\",\"version\":\"MDM9650\"},{\"status\":\"affected\",\"version\":\"QAM8255P\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QAM8650P\"},{\"status\":\"affected\",\"version\":\"QAM8775P\"},{\"status\":\"affected\",\"version\":\"QCA4024\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6310\"},{\"status\":\"affected\",\"version\":\"QCA6320\"},{\"status\":\"affected\",\"version\":\"QCA6335\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6420\"},{\"status\":\"affected\",\"version\":\"QCA6421\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6430\"},{\"status\":\"affected\",\"version\":\"QCA6431\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6564\"},{\"status\":\"affected\",\"version\":\"QCA6564AU\"},{\"status\":\"affected\",\"version\":\"QCA6574\"},{\"status\":\"affected\",\"version\":\"QCA6574A\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCA6797AQ\"},{\"status\":\"affected\",\"version\":\"QCA7500\"},{\"status\":\"affected\",\"version\":\"QCA8075\"},{\"status\":\"affected\",\"version\":\"QCA8081\"},{\"status\":\"affected\",\"version\":\"QCA8337\"},{\"status\":\"affected\",\"version\":\"QCA9377\"},{\"status\":\"affected\",\"version\":\"QCA9880\"},{\"status\":\"affected\",\"version\":\"QCA9886\"},{\"status\":\"affected\",\"version\":\"QCA9888\"},{\"status\":\"affected\",\"version\":\"QCA9889\"},{\"status\":\"affected\",\"version\":\"QCA9898\"},{\"status\":\"affected\",\"version\":\"QCA9980\"},{\"status\":\"affected\",\"version\":\"QCA9984\"},{\"status\":\"affected\",\"version\":\"QCA9985\"},{\"status\":\"affected\",\"version\":\"QCA9990\"},{\"status\":\"affected\",\"version\":\"QCA9992\"},{\"status\":\"affected\",\"version\":\"QCA9994\"},{\"status\":\"affected\",\"version\":\"QCM2290\"},{\"status\":\"affected\",\"version\":\"QCM4290\"},{\"status\":\"affected\",\"version\":\"QCM4325\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCM5430\"},{\"status\":\"affected\",\"version\":\"QCM6125\"},{\"status\":\"affected\",\"version\":\"QCM6490\"},{\"status\":\"affected\",\"version\":\"QCN5022\"},{\"status\":\"affected\",\"version\":\"QCN5024\"},{\"status\":\"affected\",\"version\":\"QCN5052\"},{\"status\":\"affected\",\"version\":\"QCN5122\"},{\"status\":\"affected\",\"version\":\"QCN5124\"},{\"status\":\"affected\",\"version\":\"QCN5152\"},{\"status\":\"affected\",\"version\":\"QCN5154\"},{\"status\":\"affected\",\"version\":\"QCN5164\"},{\"status\":\"affected\",\"version\":\"QCN6023\"},{\"status\":\"affected\",\"version\":\"QCN6024\"},{\"status\":\"affected\",\"version\":\"QCN9000\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCN9022\"},{\"status\":\"affected\",\"version\":\"QCN9024\"},{\"status\":\"affected\",\"version\":\"QCN9070\"},{\"status\":\"affected\",\"version\":\"QCN9072\"},{\"status\":\"affected\",\"version\":\"QCN9074\"},{\"status\":\"affected\",\"version\":\"QCN9100\"},{\"status\":\"affected\",\"version\":\"QCS2290\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS4290\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"QCS5430\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6125\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"QCS7230\"},{\"status\":\"affected\",\"version\":\"QCS8155\"},{\"status\":\"affected\",\"version\":\"QCS8250\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"QRB5165M\"},{\"status\":\"affected\",\"version\":\"QRB5165N\"},{\"status\":\"affected\",\"version\":\"QSM8250\"},{\"status\":\"affected\",\"version\":\"Qualcomm 205 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm 215 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC5 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB3 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB5 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8255P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SA8770P\"},{\"status\":\"affected\",\"version\":\"SA8775P\"},{\"status\":\"affected\",\"version\":\"SA9000P\"},{\"status\":\"affected\",\"version\":\"SD 675\"},{\"status\":\"affected\",\"version\":\"SD 8 Gen1 5G\"},{\"status\":\"affected\",\"version\":\"SD626\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD670\"},{\"status\":\"affected\",\"version\":\"SD675\"},{\"status\":\"affected\",\"version\":\"SD730\"},{\"status\":\"affected\",\"version\":\"SD835\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SD888\"},{\"status\":\"affected\",\"version\":\"SDM429W\"},{\"status\":\"affected\",\"version\":\"SDX55\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"SG8275P\"},{\"status\":\"affected\",\"version\":\"SM4125\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM7250P\"},{\"status\":\"affected\",\"version\":\"SM7315\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Smart Display 200 Platform (APQ5053-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 210 Processor\"},{\"status\":\"affected\",\"version\":\"Snapdragon 212 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 425 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 429 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 439 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 625 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 626 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 632 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 665 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 670 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 675 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 678 Mobile Platform (SM6150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 710 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730 Mobile Platform (SM7150-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730G Mobile Platform (SM7150-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 732G Mobile Platform (SM7150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 750G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 780G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 820 Automotive Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 835 Mobile PC Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 845 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR2 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 4100+ Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon X12 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X24 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X50 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X65 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2+ Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 4G Modem\"},{\"status\":\"affected\",\"version\":\"SSG2115P\"},{\"status\":\"affected\",\"version\":\"SSG2125P\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR1120\"},{\"status\":\"affected\",\"version\":\"SXR1230P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 100 Platform (APQ8053-AA)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 200 Platform (APQ8053-AC)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 300 Platform\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 400 Platform\"},{\"status\":\"affected\",\"version\":\"WCD9326\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9340\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9360\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9371\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3610\"},{\"status\":\"affected\",\"version\":\"WCN3615\"},{\"status\":\"affected\",\"version\":\"WCN3620\"},{\"status\":\"affected\",\"version\":\"WCN3660B\"},{\"status\":\"affected\",\"version\":\"WCN3680\"},{\"status\":\"affected\",\"version\":\"WCN3680B\"},{\"status\":\"affected\",\"version\":\"WCN3910\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption in DSP Services during a remote call from HLOS to DSP.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-416\",\"description\":\"CWE-416 Use After Free\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-33063:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-33063:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T15:17:49.569Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:31.211Z", "fetchedAt": "2026-10-24T15:50:52.392Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T15:17:49.569Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T15:50:52.392Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d522adcec42f968a90eb572e80fcf9abe96046ac57fa83f729fcfc7f4d7b422f", "sourceModifiedAt": "2025-10-21T23:05:31.211Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "HLOS から DSP へのリモート呼び出し中に DSP Services でメモリ破損が発生します。", "risk": "メモリ破損が起こります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "HLOS から DSP へのリモート呼び出しが行われる環境で発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：315 5G IoT Modem。影響ありとして記載：APQ8017。影響ありとして記載：AQT1000。影響ありとして記載：AR8031。影響ありとして記載：AR8035。影響ありとして記載：AR9380。影響ありとして記載：C-V2X 9150。影響ありとして記載：CSR8811。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：CSRB31024。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：IPQ4018。影響ありとして記載：IPQ4019。影響ありとして記載：IPQ4028。影響ありとして記載：IPQ4029。影響ありとして記載：IPQ5010。影響ありとして記載：IPQ6010。影響ありとして記載：IPQ6018。影響ありとして記載：IPQ6028。影響ありとして記載：IPQ8064。影響ありとして記載：IPQ8065。影響ありとして記載：IPQ8068。影響ありとして記載：IPQ8070。影響ありとして記載：IPQ8070A。影響ありとして記載：IPQ8071A。影響ありとして記載：IPQ8072A。影響ありとして記載：IPQ8074A。影響ありとして記載：IPQ8076。影響ありとして記載：IPQ8076A。影響ありとして記載：IPQ8078。影響ありとして記載：IPQ8078A。影響ありとして記載：IPQ8173。影響ありとして記載：IPQ8174。影響ありとして記載：MDM9650。影響ありとして記載：QAM8255P。影響ありとして記載：QAM8295P。影響ありとして記載：QAM8650P。影響ありとして記載：QAM8775P。影響ありとして記載：QCA4024。影響ありとして記載：QCA6174A。影響ありとして記載：QCA6310。影響ありとして記載：QCA6320。影響ありとして記載：QCA6335。影響ありとして記載：QCA6391。影響ありとして記載：QCA6420。影響ありとして記載：QCA6421。影響ありとして記載：QCA6426。影響ありとして記載：QCA6430。影響ありとして記載：QCA6431。影響ありとして記載：QCA6436。影響ありとして記載：QCA6564。影響ありとして記載：QCA6564AU。影響ありとして記載：QCA6574。影響ありとして記載：QCA6574A。影響ありとして記載：QCA6574AU。影響ありとして記載：QCA6595。影響ありとして記載：QCA6595AU。影響ありとして記載：QCA6696。影響ありとして記載：QCA6698AQ。影響ありとして記載：QCA6797AQ。影響ありとして記載：QCA7500。影響ありとして記載：QCA8075。影響ありとして記載：QCA8081。影響ありとして記載：QCA8337。影響ありとして記載：QCA9377。影響ありとして記載：QCA9880。影響ありとして記載：QCA9886。影響ありとして記載：QCA9888。影響ありとして記載：QCA9889。影響ありとして記載：QCA9898。影響ありとして記載：QCA9980。影響ありとして記載：QCA9984。影響ありとして記載：QCA9985。影響ありとして記載：QCA9990。影響ありとして記載：QCA9992。影響ありとして記載：QCA9994。影響ありとして記載：QCM2290。影響ありとして記載：QCM4290。影響ありとして記載：QCM4325。影響ありとして記載：QCM4490。影響ありとして記載：QCM5430。影響ありとして記載：QCM6125。影響ありとして記載：QCM6490。影響ありとして記載：QCN5022。影響ありとして記載：QCN5024。影響ありとして記載：QCN5052。影響ありとして記載：QCN5122。影響ありとして記載：QCN5124。影響ありとして記載：QCN5152。影響ありとして記載：QCN5154。影響ありとして記載：QCN5164。影響ありとして記載：QCN6023。影響ありとして記載：QCN6024。影響ありとして記載：QCN9000。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCN9022。影響ありとして記載：QCN9024。影響ありとして記載：QCN9070。影響ありとして記載：QCN9072。影響ありとして記載：QCN9074。影響ありとして記載：QCN9100。影響ありとして記載：QCS2290。影響ありとして記載：QCS410。影響ありとして記載：QCS4290。影響ありとして記載：QCS4490。影響ありとして記載：QCS5430。影響ありとして記載：QCS610。影響ありとして記載：QCS6125。影響ありとして記載：QCS6490。影響ありとして記載：QCS7230。影響ありとして記載：QCS8155。影響ありとして記載：QCS8250。影響ありとして記載：QCS8550。影響ありとして記載：QRB5165M。影響ありとして記載：QRB5165N。影響ありとして記載：QSM8250。影響ありとして記載：Robotics RB3 Platform。影響ありとして記載：Robotics RB5 Platform。影響ありとして記載：SA4150P。影響ありとして記載：SA4155P。影響ありとして記載：SA6145P。影響ありとして記載：SA6150P。影響ありとして記載：SA6155。影響ありとして記載：SA6155P。影響ありとして記載：SA8145P。影響ありとして記載：SA8150P。影響ありとして記載：SA8155。影響ありとして記載：SA8155P。影響ありとして記載：SA8195P。影響ありとして記載：SA8255P。影響ありとして記載：SA8295P。影響ありとして記載：SA8770P。影響ありとして記載：SA8775P。影響ありとして記載：SA9000P。影響ありとして記載：SD 675。影響ありとして記載：SD626。影響ありとして記載：SD660。影響ありとして記載：SD670。影響ありとして記載：SD675。影響ありとして記載：SD730。影響ありとして記載：SD835。影響ありとして記載：SD855。影響ありとして記載：SD865 5G。影響ありとして記載：SD888。影響ありとして記載：SDM429W。影響ありとして記載：SDX55。影響ありとして記載：SG4150P。影響ありとして記載：SG8275P。影響ありとして記載：SM4125。影響ありとして記載：SM6250。影響ありとして記載：SM7250P。影響ありとして記載：SM7315。影響ありとして記載：SM7325P。影響ありとして記載：SM8550P。影響ありとして記載：Snapdragon 210 Processor。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：Snapdragon Wear 4100+ Platform。影響ありとして記載：Snapdragon XR1 Platform。影響ありとして記載：Snapdragon XR2+ Gen 1 Platform。影響ありとして記載：SSG2115P。影響ありとして記載：SSG2125P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：SXR1120。影響ありとして記載：SXR1230P。影響ありとして記載：SXR2130。影響ありとして記載：SXR2230P。影響ありとして記載：WCD9326。影響ありとして記載：WCD9335。影響ありとして記載：WCD9340。影響ありとして記載：WCD9341。影響ありとして記載：WCD9360。影響ありとして記載：WCD9370。影響ありとして記載：WCD9371。影響ありとして記載：WCD9375。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3610。影響ありとして記載：WCN3615。影響ありとして記載：WCN3620。影響ありとして記載：WCN3660B。影響ありとして記載：WCN3680。影響ありとして記載：WCN3680B。影響ありとして記載：WCN3910。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN3990。影響ありとして記載：WCN6740。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables、Snapdragon Wired Infrastructure and Networking", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33063", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "https://nvd.nist.gov/vuln/detail/CVE-2023-33063" ] } ], "actions": [ { "text": "ベンダーの指示に従って修正策や緩和策を適用するか、修正策が入手できない場合は製品の使用を中止します。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-33063」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33063", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "https://nvd.nist.gov/vuln/detail/CVE-2023-33063" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33063", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "https://nvd.nist.gov/vuln/detail/CVE-2023-33063" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33063", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "https://nvd.nist.gov/vuln/detail/CVE-2023-33063" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33063", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "https://nvd.nist.gov/vuln/detail/CVE-2023-33063" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33063", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a", "label": "CISAが示す関連情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33063", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory corruption in DSP Services during a remote call from HLOS to DSP.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourceField": "/containers/cna/title", "excerpt": "Use After Free in DSP Services", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33063.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Voice & Music\",\"Snapdragon Wearables\",\"Snapdragon Wired Infrastructure and Networking\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"315 5G IoT Modem\"},{\"status\":\"affected\",\"version\":\"APQ8017\"},{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"AR8031\"},{\"status\":\"affected\",\"version\":\"AR8035\"},{\"status\":\"affected\",\"version\":\"AR9380\"},{\"status\":\"affected\",\"version\":\"C-V2X 9150\"},{\"status\":\"affected\",\"version\":\"CSR8811\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"CSRB31024\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"Flight RB5 5G Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 214 Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 216 Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 316 Platform\"},{\"status\":\"affected\",\"version\":\"Immersive Home 318 Platform\"},{\"status\":\"affected\",\"version\":\"IPQ4018\"},{\"status\":\"affected\",\"version\":\"IPQ4019\"},{\"status\":\"affected\",\"version\":\"IPQ4028\"},{\"status\":\"affected\",\"version\":\"IPQ4029\"},{\"status\":\"affected\",\"version\":\"IPQ5010\"},{\"status\":\"affected\",\"version\":\"IPQ6010\"},{\"status\":\"affected\",\"version\":\"IPQ6018\"},{\"status\":\"affected\",\"version\":\"IPQ6028\"},{\"status\":\"affected\",\"version\":\"IPQ8064\"},{\"status\":\"affected\",\"version\":\"IPQ8065\"},{\"status\":\"affected\",\"version\":\"IPQ8068\"},{\"status\":\"affected\",\"version\":\"IPQ8070\"},{\"status\":\"affected\",\"version\":\"IPQ8070A\"},{\"status\":\"affected\",\"version\":\"IPQ8071A\"},{\"status\":\"affected\",\"version\":\"IPQ8072A\"},{\"status\":\"affected\",\"version\":\"IPQ8074A\"},{\"status\":\"affected\",\"version\":\"IPQ8076\"},{\"status\":\"affected\",\"version\":\"IPQ8076A\"},{\"status\":\"affected\",\"version\":\"IPQ8078\"},{\"status\":\"affected\",\"version\":\"IPQ8078A\"},{\"status\":\"affected\",\"version\":\"IPQ8173\"},{\"status\":\"affected\",\"version\":\"IPQ8174\"},{\"status\":\"affected\",\"version\":\"MDM9650\"},{\"status\":\"affected\",\"version\":\"QAM8255P\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QAM8650P\"},{\"status\":\"affected\",\"version\":\"QAM8775P\"},{\"status\":\"affected\",\"version\":\"QCA4024\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6310\"},{\"status\":\"affected\",\"version\":\"QCA6320\"},{\"status\":\"affected\",\"version\":\"QCA6335\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6420\"},{\"status\":\"affected\",\"version\":\"QCA6421\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6430\"},{\"status\":\"affected\",\"version\":\"QCA6431\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6564\"},{\"status\":\"affected\",\"version\":\"QCA6564AU\"},{\"status\":\"affected\",\"version\":\"QCA6574\"},{\"status\":\"affected\",\"version\":\"QCA6574A\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCA6797AQ\"},{\"status\":\"affected\",\"version\":\"QCA7500\"},{\"status\":\"affected\",\"version\":\"QCA8075\"},{\"status\":\"affected\",\"version\":\"QCA8081\"},{\"status\":\"affected\",\"version\":\"QCA8337\"},{\"status\":\"affected\",\"version\":\"QCA9377\"},{\"status\":\"affected\",\"version\":\"QCA9880\"},{\"status\":\"affected\",\"version\":\"QCA9886\"},{\"status\":\"affected\",\"version\":\"QCA9888\"},{\"status\":\"affected\",\"version\":\"QCA9889\"},{\"status\":\"affected\",\"version\":\"QCA9898\"},{\"status\":\"affected\",\"version\":\"QCA9980\"},{\"status\":\"affected\",\"version\":\"QCA9984\"},{\"status\":\"affected\",\"version\":\"QCA9985\"},{\"status\":\"affected\",\"version\":\"QCA9990\"},{\"status\":\"affected\",\"version\":\"QCA9992\"},{\"status\":\"affected\",\"version\":\"QCA9994\"},{\"status\":\"affected\",\"version\":\"QCM2290\"},{\"status\":\"affected\",\"version\":\"QCM4290\"},{\"status\":\"affected\",\"version\":\"QCM4325\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCM5430\"},{\"status\":\"affected\",\"version\":\"QCM6125\"},{\"status\":\"affected\",\"version\":\"QCM6490\"},{\"status\":\"affected\",\"version\":\"QCN5022\"},{\"status\":\"affected\",\"version\":\"QCN5024\"},{\"status\":\"affected\",\"version\":\"QCN5052\"},{\"status\":\"affected\",\"version\":\"QCN5122\"},{\"status\":\"affected\",\"version\":\"QCN5124\"},{\"status\":\"affected\",\"version\":\"QCN5152\"},{\"status\":\"affected\",\"version\":\"QCN5154\"},{\"status\":\"affected\",\"version\":\"QCN5164\"},{\"status\":\"affected\",\"version\":\"QCN6023\"},{\"status\":\"affected\",\"version\":\"QCN6024\"},{\"status\":\"affected\",\"version\":\"QCN9000\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCN9022\"},{\"status\":\"affected\",\"version\":\"QCN9024\"},{\"status\":\"affected\",\"version\":\"QCN9070\"},{\"status\":\"affected\",\"version\":\"QCN9072\"},{\"status\":\"affected\",\"version\":\"QCN9074\"},{\"status\":\"affected\",\"version\":\"QCN9100\"},{\"status\":\"affected\",\"version\":\"QCS2290\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS4290\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"QCS5430\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6125\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"QCS7230\"},{\"status\":\"affected\",\"version\":\"QCS8155\"},{\"status\":\"affected\",\"version\":\"QCS8250\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"QRB5165M\"},{\"status\":\"affected\",\"version\":\"QRB5165N\"},{\"status\":\"affected\",\"version\":\"QSM8250\"},{\"status\":\"affected\",\"version\":\"Qualcomm 205 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm 215 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC5 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB3 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB5 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8255P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SA8770P\"},{\"status\":\"affected\",\"version\":\"SA8775P\"},{\"status\":\"affected\",\"version\":\"SA9000P\"},{\"status\":\"affected\",\"version\":\"SD 675\"},{\"status\":\"affected\",\"version\":\"SD 8 Gen1 5G\"},{\"status\":\"affected\",\"version\":\"SD626\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD670\"},{\"status\":\"affected\",\"version\":\"SD675\"},{\"status\":\"affected\",\"version\":\"SD730\"},{\"status\":\"affected\",\"version\":\"SD835\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SD888\"},{\"status\":\"affected\",\"version\":\"SDM429W\"},{\"status\":\"affected\",\"version\":\"SDX55\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"SG8275P\"},{\"status\":\"affected\",\"version\":\"SM4125\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM7250P\"},{\"status\":\"affected\",\"version\":\"SM7315\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Smart Display 200 Platform (APQ5053-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 210 Processor\"},{\"status\":\"affected\",\"version\":\"Snapdragon 212 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 425 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 429 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 439 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 625 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 626 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 632 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 665 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 670 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 675 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 678 Mobile Platform (SM6150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 710 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730 Mobile Platform (SM7150-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730G Mobile Platform (SM7150-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 732G Mobile Platform (SM7150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 750G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 780G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 820 Automotive Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 835 Mobile PC Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 845 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR2 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 4100+ Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon X12 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X24 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X50 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X65 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2+ Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 4G Modem\"},{\"status\":\"affected\",\"version\":\"SSG2115P\"},{\"status\":\"affected\",\"version\":\"SSG2125P\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR1120\"},{\"status\":\"affected\",\"version\":\"SXR1230P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 100 Platform (APQ8053-AA)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 200 Platform (APQ8053-AC)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 300 Platform\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 400 Platform\"},{\"status\":\"affected\",\"version\":\"WCD9326\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9340\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9360\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9371\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3610\"},{\"status\":\"affected\",\"version\":\"WCN3615\"},{\"status\":\"affected\",\"version\":\"WCN3620\"},{\"status\":\"affected\",\"version\":\"WCN3660B\"},{\"status\":\"affected\",\"version\":\"WCN3680\"},{\"status\":\"affected\",\"version\":\"WCN3680B\"},{\"status\":\"affected\",\"version\":\"WCN3910\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33063", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-33063\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-33063（Snapdragon）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・HLOS から DSP へのリモート呼び出しが行われる環境で発生します。\n・公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：315 5G IoT Modem。影響ありとして記載：APQ8017。影響ありとして記載：AQT1000。影響ありとして記載：AR8031。影響ありとして記載：AR8035。影響ありとして記載：AR9380。影響ありとして記載：C-V2X 9150。影響ありとして記載：CSR8811。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：CSRB31024。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：IPQ4018。影響ありとして記載：IPQ4019。影響ありとして記載：IPQ4028。影響ありとして記載：IPQ4029。影響ありとして記載：IPQ5010。影響ありとして記載：IPQ6010。影響ありとして記載：IPQ6018。影響ありとして記載：IPQ6028。影響ありとして記載：IPQ8064。影響ありとして記載：IPQ8065。影響ありとして記載：IPQ8068。影響ありとして記載：IPQ8070。影響ありとして記載：IPQ8070A。影響ありとして記載：IPQ8071A。影響ありとして記載：IPQ8072A。影響ありとして記載：IPQ8074A。影響ありとして記載：IPQ8076。影響ありとして記載：IPQ8076A。影響ありとして記載：IPQ8078。影響ありとして記載：IPQ8078A。影響ありとして記載：IPQ8173。影響ありとして記載：IPQ8174。影響ありとして記載：MDM9650。影響ありとして記載：QAM8255P。影響ありとして記載：QAM8295P。影響ありとして記載：QAM8650P。影響ありとして記載：QAM8775P。影響ありとして記載：QCA4024。影響ありとして記載：QCA6174A。影響ありとして記載：QCA6310。影響ありとして記載：QCA6320。影響ありとして記載：QCA6335。影響ありとして記載：QCA6391。影響ありとして記載：QCA6420。影響ありとして記載：QCA6421。影響ありとして記載：QCA6426。影響ありとして記載：QCA6430。影響ありとして記載：QCA6431。影響ありとして記載：QCA6436。影響ありとして記載：QCA6564。影響ありとして記載：QCA6564AU。影響ありとして記載：QCA6574。影響ありとして記載：QCA6574A。影響ありとして記載：QCA6574AU。影響ありとして記載：QCA6595。影響ありとして記載：QCA6595AU。影響ありとして記載：QCA6696。影響ありとして記載：QCA6698AQ。影響ありとして記載：QCA6797AQ。影響ありとして記載：QCA7500。影響ありとして記載：QCA8075。影響ありとして記載：QCA8081。影響ありとして記載：QCA8337。影響ありとして記載：QCA9377。影響ありとして記載：QCA9880。影響ありとして記載：QCA9886。影響ありとして記載：QCA9888。影響ありとして記載：QCA9889。影響ありとして記載：QCA9898。影響ありとして記載：QCA9980。影響ありとして記載：QCA9984。影響ありとして記載：QCA9985。影響ありとして記載：QCA9990。影響ありとして記載：QCA9992。影響ありとして記載：QCA9994。影響ありとして記載：QCM2290。影響ありとして記載：QCM4290。影響ありとして記載：QCM4325。影響ありとして記載：QCM4490。影響ありとして記載：QCM5430。影響ありとして記載：QCM6125。影響ありとして記載：QCM6490。影響ありとして記載：QCN5022。影響ありとして記載：QCN5024。影響ありとして記載：QCN5052。影響ありとして記載：QCN5122。影響ありとして記載：QCN5124。影響ありとして記載：QCN5152。影響ありとして記載：QCN5154。影響ありとして記載：QCN5164。影響ありとして記載：QCN6023。影響ありとして記載：QCN6024。影響ありとして記載：QCN9000。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCN9022。影響ありとして記載：QCN9024。影響ありとして記載：QCN9070。影響ありとして記載：QCN9072。影響ありとして記載：QCN9074。影響ありとして記載：QCN9100。影響ありとして記載：QCS2290。影響ありとして記載：QCS410。影響ありとして記載：QCS4290。影響ありとして記載：QCS4490。影響ありとして記載：QCS5430。影響ありとして記載：QCS610。影響ありとして記載：QCS6125。影響ありとして記載：QCS6490。影響ありとして記載：QCS7230。影響ありとして記載：QCS8155。影響ありとして記載：QCS8250。影響ありとして記載：QCS8550。影響ありとして記載：QRB5165M。影響ありとして記載：QRB5165N。影響ありとして記載：QSM8250。影響ありとして記載：Robotics RB3 Platform。影響ありとして記載：Robotics RB5 Platform。影響ありとして記載：SA4150P。影響ありとして記載：SA4155P。影響ありとして記載：SA6145P。影響ありとして記載：SA6150P。影響ありとして記載：SA6155。影響ありとして記載：SA6155P。影響ありとして記載：SA8145P。影響ありとして記載：SA8150P。影響ありとして記載：SA8155。影響ありとして記載：SA8155P。影響ありとして記載：SA8195P。影響ありとして記載：SA8255P。影響ありとして記載：SA8295P。影響ありとして記載：SA8770P。影響ありとして記載：SA8775P。影響ありとして記載：SA9000P。影響ありとして記載：SD 675。影響ありとして記載：SD626。影響ありとして記載：SD660。影響ありとして記載：SD670。影響ありとして記載：SD675。影響ありとして記載：SD730。影響ありとして記載：SD835。影響ありとして記載：SD855。影響ありとして記載：SD865 5G。影響ありとして記載：SD888。影響ありとして記載：SDM429W。影響ありとして記載：SDX55。影響ありとして記載：SG4150P。影響ありとして記載：SG8275P。影響ありとして記載：SM4125。影響ありとして記載：SM6250。影響ありとして記載：SM7250P。影響ありとして記載：SM7315。影響ありとして記載：SM7325P。影響ありとして記載：SM8550P。影響ありとして記載：Snapdragon 210 Processor。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：Snapdragon Wear 4100+ Platform。影響ありとして記載：Snapdragon XR1 Platform。影響ありとして記載：Snapdragon XR2+ Gen 1 Platform。影響ありとして記載：SSG2115P。影響ありとして記載：SSG2125P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：SXR1120。影響ありとして記載：SXR1230P。影響ありとして記載：SXR2130。影響ありとして記載：SXR2230P。影響ありとして記載：WCD9326。影響ありとして記載：WCD9335。影響ありとして記載：WCD9340。影響ありとして記載：WCD9341。影響ありとして記載：WCD9360。影響ありとして記載：WCD9370。影響ありとして記載：WCD9371。影響ありとして記載：WCD9375。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3610。影響ありとして記載：WCN3615。影響ありとして記載：WCN3620。影響ありとして記載：WCN3660B。影響ありとして記載：WCN3680。影響ありとして記載：WCN3680B。影響ありとして記載：WCN3910。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN3990。影響ありとして記載：WCN6740。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables、Snapdragon Wired Infrastructure and Networking\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-33063", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T15:50:52.392Z", "lastSuccess": "2026-10-24T15:50:52.392Z", "sourceCheckedAt": "2026-10-24T15:50:52.392Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-33106", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "大きな同期ポイントのリストをAUXコマンドで IOCTL_KGSL_GPU_AUX_COMMAND に送信すると、メモリが破壊されます。", "risk": "メモリ破損が発生します。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 8.4, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "AR8035（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRA6620（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRA6640（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6200（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6700（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6900（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Flight RB5 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8255P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8650P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8775P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6174A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6426（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6436（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6595（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6595AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6696（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6698AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6797AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA8081（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA8337（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA9377（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM2290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM4290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM4325（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM4490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM5430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM8550（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN6024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9011（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9012（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS2290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS410（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS4290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS4490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS5430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS7230（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS8250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS8550（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QRB5165M（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QRB5165N（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm 215 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC5 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Robotics RB5 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA4155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8195P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8255P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8770P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8775P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA9000P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD 8 Gen1 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD660（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD865 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD888（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SG4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SG8275P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM4125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7250P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7315（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7325P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM8550P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Smart Audio 400 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 439 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 460 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 480 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 660 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 662 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 690 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 695 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 750G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 765 5G Mobile Platform (SM7250-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 778G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 780G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 782G Mobile Platform (SM7325-AF)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 7c+ Gen 3 Compute（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 865 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 870 5G Mobile Platform (SM8250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 888 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon AR2 Gen 1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 5G Modem-RF（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon W5+ Gen 1 Wearable Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X12 LTE Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X55 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X65 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon XR2 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon XR2+ Gen 1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SSG2115P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SSG2125P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR1230P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR2130（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR2230P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9326（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9335（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9341（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9380（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9390（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9395（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3615（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3660B（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3680B（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3910（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3980（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3990（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN6740（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8832（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8840（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8845（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8845H（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-33106」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33106", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33106", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-05T03:04:27.889Z", "modifiedAt": "2025-10-21T23:05:30.898Z", "fetchedAt": "2026-10-24T05:23:19.156Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "sourceTitle": "Use of Out-of-range Pointer Offset in Graphics", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "AR8035" }, { "status": "affected", "version": "CSRA6620" }, { "status": "affected", "version": "CSRA6640" }, { "status": "affected", "version": "FastConnect 6200" }, { "status": "affected", "version": "FastConnect 6700" }, { "status": "affected", "version": "FastConnect 6800" }, { "status": "affected", "version": "FastConnect 6900" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "Flight RB5 5G Platform" }, { "status": "affected", "version": "QAM8255P" }, { "status": "affected", "version": "QAM8295P" }, { "status": "affected", "version": "QAM8650P" }, { "status": "affected", "version": "QAM8775P" }, { "status": "affected", "version": "QCA6174A" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCA6426" }, { "status": "affected", "version": "QCA6436" }, { "status": "affected", "version": "QCA6574" }, { "status": "affected", "version": "QCA6574A" }, { "status": "affected", "version": "QCA6574AU" }, { "status": "affected", "version": "QCA6595" }, { "status": "affected", "version": "QCA6595AU" }, { "status": "affected", "version": "QCA6696" }, { "status": "affected", "version": "QCA6698AQ" }, { "status": "affected", "version": "QCA6797AQ" }, { "status": "affected", "version": "QCA8081" }, { "status": "affected", "version": "QCA8337" }, { "status": "affected", "version": "QCA9377" }, { "status": "affected", "version": "QCM2290" }, { "status": "affected", "version": "QCM4290" }, { "status": "affected", "version": "QCM4325" }, { "status": "affected", "version": "QCM4490" }, { "status": "affected", "version": "QCM5430" }, { "status": "affected", "version": "QCM6490" }, { "status": "affected", "version": "QCM8550" }, { "status": "affected", "version": "QCN6024" }, { "status": "affected", "version": "QCN9011" }, { "status": "affected", "version": "QCN9012" }, { "status": "affected", "version": "QCN9024" }, { "status": "affected", "version": "QCS2290" }, { "status": "affected", "version": "QCS410" }, { "status": "affected", "version": "QCS4290" }, { "status": "affected", "version": "QCS4490" }, { "status": "affected", "version": "QCS5430" }, { "status": "affected", "version": "QCS610" }, { "status": "affected", "version": "QCS6490" }, { "status": "affected", "version": "QCS7230" }, { "status": "affected", "version": "QCS8250" }, { "status": "affected", "version": "QCS8550" }, { "status": "affected", "version": "QRB5165M" }, { "status": "affected", "version": "QRB5165N" }, { "status": "affected", "version": "Qualcomm 215 Mobile Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC1 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC5 Platform" }, { "status": "affected", "version": "Robotics RB5 Platform" }, { "status": "affected", "version": "SA4150P" }, { "status": "affected", "version": "SA4155P" }, { "status": "affected", "version": "SA6145P" }, { "status": "affected", "version": "SA6150P" }, { "status": "affected", "version": "SA6155P" }, { "status": "affected", "version": "SA8145P" }, { "status": "affected", "version": "SA8150P" }, { "status": "affected", "version": "SA8155P" }, { "status": "affected", "version": "SA8195P" }, { "status": "affected", "version": "SA8255P" }, { "status": "affected", "version": "SA8295P" }, { "status": "affected", "version": "SA8770P" }, { "status": "affected", "version": "SA8775P" }, { "status": "affected", "version": "SA9000P" }, { "status": "affected", "version": "SD 8 Gen1 5G" }, { "status": "affected", "version": "SD660" }, { "status": "affected", "version": "SD865 5G" }, { "status": "affected", "version": "SD888" }, { "status": "affected", "version": "SG4150P" }, { "status": "affected", "version": "SG8275P" }, { "status": "affected", "version": "SM4125" }, { "status": "affected", "version": "SM7250P" }, { "status": "affected", "version": "SM7315" }, { "status": "affected", "version": "SM7325P" }, { "status": "affected", "version": "SM8550P" }, { "status": "affected", "version": "Smart Audio 400 Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 439 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 460 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)" }, { "status": "affected", "version": "Snapdragon 660 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 662 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon 690 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 695 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 750G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)" }, { "status": "affected", "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)" }, { "status": "affected", "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)" }, { "status": "affected", "version": "Snapdragon 778G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)" }, { "status": "affected", "version": "Snapdragon 780G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)" }, { "status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute" }, { "status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)" }, { "status": "affected", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)" }, { "status": "affected", "version": "Snapdragon 888 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)" }, { "status": "affected", "version": "Snapdragon AR2 Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon Auto 5G Modem-RF" }, { "status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform" }, { "status": "affected", "version": "Snapdragon X12 LTE Modem" }, { "status": "affected", "version": "Snapdragon X55 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon X65 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon XR2 5G Platform" }, { "status": "affected", "version": "Snapdragon XR2+ Gen 1 Platform" }, { "status": "affected", "version": "SSG2115P" }, { "status": "affected", "version": "SSG2125P" }, { "status": "affected", "version": "SW5100" }, { "status": "affected", "version": "SW5100P" }, { "status": "affected", "version": "SXR1230P" }, { "status": "affected", "version": "SXR2130" }, { "status": "affected", "version": "SXR2230P" }, { "status": "affected", "version": "WCD9326" }, { "status": "affected", "version": "WCD9335" }, { "status": "affected", "version": "WCD9341" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9380" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCD9390" }, { "status": "affected", "version": "WCD9395" }, { "status": "affected", "version": "WCN3615" }, { "status": "affected", "version": "WCN3660B" }, { "status": "affected", "version": "WCN3680B" }, { "status": "affected", "version": "WCN3910" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3980" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN3990" }, { "status": "affected", "version": "WCN6740" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8832" }, { "status": "affected", "version": "WSA8835" }, { "status": "affected", "version": "WSA8840" }, { "status": "affected", "version": "WSA8845" }, { "status": "affected", "version": "WSA8845H" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-33106", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "fetchedAt": "2026-10-24T05:23:19.156Z", "publishedAt": "2023-12-05T03:04:27.889Z", "modifiedAt": "2025-10-21T23:05:30.898Z", "state": "published", "provider": "qualcomm", "title": "Use of Out-of-range Pointer Offset in Graphics", "descriptions": [ { "lang": "en", "value": "Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "AR8035", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "CSRA6620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "CSRA6640", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "FastConnect 6200", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "FastConnect 6700", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "FastConnect 6800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "FastConnect 6900", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "Flight RB5 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "QAM8255P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "QAM8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "QAM8650P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "QAM8775P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "QCA6174A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "QCA6426", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "QCA6436", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "QCA6574", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "QCA6574A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "QCA6574AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "QCA6595", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "QCA6595AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "QCA6696", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "QCA6698AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "QCA6797AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "QCA8081", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "QCA8337", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "QCA9377", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "QCM2290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "QCM4290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "QCM4325", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "QCM4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "QCM5430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "QCM6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "QCM8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "QCN6024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "QCN9011", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "QCN9012", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "QCN9024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "QCS2290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "QCS410", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "QCS4290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "QCS4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "QCS5430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "QCS610", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "QCS6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "QCS7230", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "QCS8250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "QCS8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "QRB5165M", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "QRB5165N", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "Qualcomm 215 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "Qualcomm Video Collaboration VC1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "Qualcomm Video Collaboration VC3 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "Qualcomm Video Collaboration VC5 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "Robotics RB5 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "SA4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "SA4155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "SA6145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "SA6150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "SA6155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "SA8145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "SA8150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "SA8155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "SA8195P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "SA8255P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "SA8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "SA8770P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "SA8775P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "SA9000P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "SD 8 Gen1 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "SD660", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "SD865 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "SD888", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "SG4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "SG8275P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "SM4125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "SM7250P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "SM7315", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "SM7325P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "SM8550P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "Smart Audio 400 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "Snapdragon 4 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "Snapdragon 4 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "Snapdragon 439 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "Snapdragon 460 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "Snapdragon 480 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "Snapdragon 660 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "Snapdragon 662 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "Snapdragon 690 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "Snapdragon 695 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "Snapdragon 750G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "Snapdragon 778G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "Snapdragon 780G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "Snapdragon 7c+ Gen 3 Compute", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "Snapdragon 8 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "Snapdragon 8 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "Snapdragon 8+ Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "Snapdragon 8+ Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "Snapdragon 865 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "Snapdragon 888 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "Snapdragon AR2 Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "Snapdragon Auto 5G Modem-RF", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "Snapdragon W5+ Gen 1 Wearable Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "Snapdragon X12 LTE Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "Snapdragon X55 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "Snapdragon X65 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "Snapdragon XR2 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "Snapdragon XR2+ Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "SSG2115P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "SSG2125P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "SW5100", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "SW5100P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "SXR1230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "SXR2130", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "SXR2230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "WCD9326", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "WCD9335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "WCD9341", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "WCD9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "WCD9390", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "WCD9395", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "WCN3615", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "WCN3660B", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "WCN3680B", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "WCN3910", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "WCN3980", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "WCN3990", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "WCN6740", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "WSA8832", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "WSA8835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "WSA8840", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "WSA8845", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "WSA8845H", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-823", "lang": "en", "description": "CWE-823 Use of Out-of-range Pointer Offset", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33106", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AR8035\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"Flight RB5 5G Platform\"},{\"status\":\"affected\",\"version\":\"QAM8255P\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QAM8650P\"},{\"status\":\"affected\",\"version\":\"QAM8775P\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6574\"},{\"status\":\"affected\",\"version\":\"QCA6574A\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCA6797AQ\"},{\"status\":\"affected\",\"version\":\"QCA8081\"},{\"status\":\"affected\",\"version\":\"QCA8337\"},{\"status\":\"affected\",\"version\":\"QCA9377\"},{\"status\":\"affected\",\"version\":\"QCM2290\"},{\"status\":\"affected\",\"version\":\"QCM4290\"},{\"status\":\"affected\",\"version\":\"QCM4325\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCM5430\"},{\"status\":\"affected\",\"version\":\"QCM6490\"},{\"status\":\"affected\",\"version\":\"QCM8550\"},{\"status\":\"affected\",\"version\":\"QCN6024\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCN9024\"},{\"status\":\"affected\",\"version\":\"QCS2290\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS4290\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"QCS5430\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"QCS7230\"},{\"status\":\"affected\",\"version\":\"QCS8250\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"QRB5165M\"},{\"status\":\"affected\",\"version\":\"QRB5165N\"},{\"status\":\"affected\",\"version\":\"Qualcomm 215 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC5 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB5 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8255P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SA8770P\"},{\"status\":\"affected\",\"version\":\"SA8775P\"},{\"status\":\"affected\",\"version\":\"SA9000P\"},{\"status\":\"affected\",\"version\":\"SD 8 Gen1 5G\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SD888\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"SG8275P\"},{\"status\":\"affected\",\"version\":\"SM4125\"},{\"status\":\"affected\",\"version\":\"SM7250P\"},{\"status\":\"affected\",\"version\":\"SM7315\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 439 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 750G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 780G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR2 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon X12 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X65 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2+ Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"SSG2115P\"},{\"status\":\"affected\",\"version\":\"SSG2125P\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR1230P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"WCD9326\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3615\"},{\"status\":\"affected\",\"version\":\"WCN3660B\"},{\"status\":\"affected\",\"version\":\"WCN3680B\"},{\"status\":\"affected\",\"version\":\"WCN3910\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-823\",\"description\":\"CWE-823 Use of Out-of-range Pointer Offset\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-33106:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-33106:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:30.898Z", "fetchedAt": "2026-10-24T05:23:19.156Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:19.156Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "90b66379834d9fe9c67cd67a96e8f3fb71d73ee9d9e6cc7835591b185708602a", "sourceModifiedAt": "2025-10-21T23:05:30.898Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "大きな同期ポイントのリストをAUXコマンドで IOCTL_KGSL_GPU_AUX_COMMAND に送信すると、メモリが破壊されます。", "risk": "メモリ破損が発生します。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AR8035。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：QAM8255P。影響ありとして記載：QAM8295P。影響ありとして記載：QAM8650P。影響ありとして記載：QAM8775P。影響ありとして記載：QCA6174A。影響ありとして記載：QCA6391。影響ありとして記載：QCA6426。影響ありとして記載：QCA6436。影響ありとして記載：QCA6574。影響ありとして記載：QCA6574A。影響ありとして記載：QCA6574AU。影響ありとして記載：QCA6595。影響ありとして記載：QCA6595AU。影響ありとして記載：QCA6696。影響ありとして記載：QCA6698AQ。影響ありとして記載：QCA6797AQ。影響ありとして記載：QCA8081。影響ありとして記載：QCA8337。影響ありとして記載：QCA9377。影響ありとして記載：QCM2290。影響ありとして記載：QCM4290。影響ありとして記載：QCM4325。影響ありとして記載：QCM4490。影響ありとして記載：QCM5430。影響ありとして記載：QCM6490。影響ありとして記載：QCM8550。影響ありとして記載：QCN6024。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCN9024。影響ありとして記載：QCS2290。影響ありとして記載：QCS410。影響ありとして記載：QCS4290。影響ありとして記載：QCS4490。影響ありとして記載：QCS5430。影響ありとして記載：QCS610。影響ありとして記載：QCS6490。影響ありとして記載：QCS7230。影響ありとして記載：QCS8250。影響ありとして記載：QCS8550。影響ありとして記載：QRB5165M。影響ありとして記載：QRB5165N。影響ありとして記載：Robotics RB5 Platform。影響ありとして記載：SA4150P。影響ありとして記載：SA4155P。影響ありとして記載：SA6145P。影響ありとして記載：SA6150P。影響ありとして記載：SA6155P。影響ありとして記載：SA8145P。影響ありとして記載：SA8150P。影響ありとして記載：SA8155P。影響ありとして記載：SA8195P。影響ありとして記載：SA8255P。影響ありとして記載：SA8295P。影響ありとして記載：SA8770P。影響ありとして記載：SA8775P。影響ありとして記載：SA9000P。影響ありとして記載：SD660。影響ありとして記載：SD865 5G。影響ありとして記載：SD888。影響ありとして記載：SG4150P。影響ありとして記載：SG8275P。影響ありとして記載：SM4125。影響ありとして記載：SM7250P。影響ありとして記載：SM7315。影響ありとして記載：SM7325P。影響ありとして記載：SM8550P。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：Snapdragon XR2+ Gen 1 Platform。影響ありとして記載：SSG2115P。影響ありとして記載：SSG2125P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：SXR1230P。影響ありとして記載：SXR2130。影響ありとして記載：SXR2230P。影響ありとして記載：WCD9326。影響ありとして記載：WCD9335。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3615。影響ありとして記載：WCN3660B。影響ありとして記載：WCN3680B。影響ありとして記載：WCN3910。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN3990。影響ありとして記載：WCN6740。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Wearables", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33106", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "https://nvd.nist.gov/vuln/detail/CVE-2023-33106" ] } ], "actions": [ { "text": "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2023-33106」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33106", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "https://nvd.nist.gov/vuln/detail/CVE-2023-33106" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33106", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "https://nvd.nist.gov/vuln/detail/CVE-2023-33106" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33106", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "https://nvd.nist.gov/vuln/detail/CVE-2023-33106" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33106", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "https://nvd.nist.gov/vuln/detail/CVE-2023-33106" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33106", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33106", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourceField": "/containers/cna/title", "excerpt": "Use of Out-of-range Pointer Offset in Graphics", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "sourceField": "retained:/originalText", "excerpt": "Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33106.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AR8035\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"Flight RB5 5G Platform\"},{\"status\":\"affected\",\"version\":\"QAM8255P\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QAM8650P\"},{\"status\":\"affected\",\"version\":\"QAM8775P\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6574\"},{\"status\":\"affected\",\"version\":\"QCA6574A\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCA6797AQ\"},{\"status\":\"affected\",\"version\":\"QCA8081\"},{\"status\":\"affected\",\"version\":\"QCA8337\"},{\"status\":\"affected\",\"version\":\"QCA9377\"},{\"status\":\"affected\",\"version\":\"QCM2290\"},{\"status\":\"affected\",\"version\":\"QCM4290\"},{\"status\":\"affected\",\"version\":\"QCM4325\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCM5430\"},{\"status\":\"affected\",\"version\":\"QCM6490\"},{\"status\":\"affected\",\"version\":\"QCM8550\"},{\"status\":\"affected\",\"version\":\"QCN6024\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCN9024\"},{\"status\":\"affected\",\"version\":\"QCS2290\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS4290\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"QCS5430\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"QCS7230\"},{\"status\":\"affected\",\"version\":\"QCS8250\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"QRB5165M\"},{\"status\":\"affected\",\"version\":\"QRB5165N\"},{\"status\":\"affected\",\"version\":\"Qualcomm 215 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC5 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB5 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8255P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SA8770P\"},{\"status\":\"affected\",\"version\":\"SA8775P\"},{\"status\":\"affected\",\"version\":\"SA9000P\"},{\"status\":\"affected\",\"version\":\"SD 8 Gen1 5G\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SD888\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"SG8275P\"},{\"status\":\"affected\",\"version\":\"SM4125\"},{\"status\":\"affected\",\"version\":\"SM7250P\"},{\"status\":\"affected\",\"version\":\"SM7315\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 439 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 750G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 780G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR2 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon X12 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X65 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2+ Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"SSG2115P\"},{\"status\":\"affected\",\"version\":\"SSG2125P\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR1230P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"WCD9326\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3615\"},{\"status\":\"affected\",\"version\":\"WCN3660B\"},{\"status\":\"affected\",\"version\":\"WCN3680B\"},{\"status\":\"affected\",\"version\":\"WCN3910\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33106", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-33106\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-33106（Snapdragon）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AR8035。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：QAM8255P。影響ありとして記載：QAM8295P。影響ありとして記載：QAM8650P。影響ありとして記載：QAM8775P。影響ありとして記載：QCA6174A。影響ありとして記載：QCA6391。影響ありとして記載：QCA6426。影響ありとして記載：QCA6436。影響ありとして記載：QCA6574。影響ありとして記載：QCA6574A。影響ありとして記載：QCA6574AU。影響ありとして記載：QCA6595。影響ありとして記載：QCA6595AU。影響ありとして記載：QCA6696。影響ありとして記載：QCA6698AQ。影響ありとして記載：QCA6797AQ。影響ありとして記載：QCA8081。影響ありとして記載：QCA8337。影響ありとして記載：QCA9377。影響ありとして記載：QCM2290。影響ありとして記載：QCM4290。影響ありとして記載：QCM4325。影響ありとして記載：QCM4490。影響ありとして記載：QCM5430。影響ありとして記載：QCM6490。影響ありとして記載：QCM8550。影響ありとして記載：QCN6024。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCN9024。影響ありとして記載：QCS2290。影響ありとして記載：QCS410。影響ありとして記載：QCS4290。影響ありとして記載：QCS4490。影響ありとして記載：QCS5430。影響ありとして記載：QCS610。影響ありとして記載：QCS6490。影響ありとして記載：QCS7230。影響ありとして記載：QCS8250。影響ありとして記載：QCS8550。影響ありとして記載：QRB5165M。影響ありとして記載：QRB5165N。影響ありとして記載：Robotics RB5 Platform。影響ありとして記載：SA4150P。影響ありとして記載：SA4155P。影響ありとして記載：SA6145P。影響ありとして記載：SA6150P。影響ありとして記載：SA6155P。影響ありとして記載：SA8145P。影響ありとして記載：SA8150P。影響ありとして記載：SA8155P。影響ありとして記載：SA8195P。影響ありとして記載：SA8255P。影響ありとして記載：SA8295P。影響ありとして記載：SA8770P。影響ありとして記載：SA8775P。影響ありとして記載：SA9000P。影響ありとして記載：SD660。影響ありとして記載：SD865 5G。影響ありとして記載：SD888。影響ありとして記載：SG4150P。影響ありとして記載：SG8275P。影響ありとして記載：SM4125。影響ありとして記載：SM7250P。影響ありとして記載：SM7315。影響ありとして記載：SM7325P。影響ありとして記載：SM8550P。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：Snapdragon XR2+ Gen 1 Platform。影響ありとして記載：SSG2115P。影響ありとして記載：SSG2125P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：SXR1230P。影響ありとして記載：SXR2130。影響ありとして記載：SXR2230P。影響ありとして記載：WCD9326。影響ありとして記載：WCD9335。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3615。影響ありとして記載：WCN3660B。影響ありとして記載：WCN3680B。影響ありとして記載：WCN3910。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN3990。影響ありとして記載：WCN6740。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Wearables\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-33106", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:19.156Z", "lastSuccess": "2026-10-24T05:23:19.156Z", "sourceCheckedAt": "2026-10-24T05:23:19.156Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-33107", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "Graphics LinuxでIOCTL呼び出し中に共有仮想メモリ領域を割り当てる際、メモリ破損が発生します。", "risk": "この脆弱性は実際に悪用されていることが確認されています。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 8.4, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "315 5G IoT Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "APQ8017（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "APQ8064AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "AQT1000（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "AR8031（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "AR8035（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "C-V2X 9150（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRA6620（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRA6640（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRB31024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6200（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6700（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6900（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Flight RB5 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MDM9250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MDM9650（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MSM8108（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MSM8209（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MSM8608（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MSM8909W（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "MSM8996AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8255P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8650P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8775P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6174A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6310（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6320（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6335（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6420（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6421（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6426（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6431（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6436（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6564（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6564A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6564AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6595（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6595AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6696（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6698AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6797AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA8081（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA8337（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA9377（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM2290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM4290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM4325（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM4490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM5430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM6125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM8550（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN6024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9011（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9012（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9024（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9074（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS2290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS410（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS4290（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS4490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS5430（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS6125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS7230（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS8155（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS8250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS8550（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QRB5165M（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QRB5165N（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QSM8250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm 205 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm 215 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC5 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Robotics RB3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Robotics RB5 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA4155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6155（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8155（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8195P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8255P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8770P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8775P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA9000P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD 675（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD 8 Gen1 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD626（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD660（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD670（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD675（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD730（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD835（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD855（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD865 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD888（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SDM429W（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SDX20M（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SDX55（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SG4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SG8275P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM4125（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM6250（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7250P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7315（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7325P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM8550P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Smart Audio 200 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Smart Audio 400 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Smart Display 200 Platform (APQ5053-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 208 Processor（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 210 Processor（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 212 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 425 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 429 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 439 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 460 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 480 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 625 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 626 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 630 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 632 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 636 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 660 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 662 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 665 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 670 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 675 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 678 Mobile Platform (SM6150-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 690 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 695 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 710 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 720G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 730 Mobile Platform (SM7150-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 730G Mobile Platform (SM7150-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 732G Mobile Platform (SM7150-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 750G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 765 5G Mobile Platform (SM7250-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 778G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 780G 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 782G Mobile Platform (SM7325-AF)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 7c+ Gen 3 Compute（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 2 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 820 Automotive Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 835 Mobile PC Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 845 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 855 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 865 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 870 5G Mobile Platform (SM8250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 888 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon AR2 Gen 1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 5G Modem-RF（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon W5+ Gen 1 Wearable Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Wear 2100 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Wear 2500 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Wear 3100 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Wear 4100+ Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X12 LTE Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X20 LTE Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X24 LTE Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X50 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X55 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X65 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon XR1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon XR2 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon XR2+ Gen 1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 4G Modem（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SSG2115P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SSG2125P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR1120（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR1230P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR2130（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR2230P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Vision Intelligence 100 Platform (APQ8053-AA)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Vision Intelligence 200 Platform (APQ8053-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Vision Intelligence 300 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Vision Intelligence 400 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9326（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9335（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9340（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9341（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9371（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9380（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9390（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9395（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3615（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3620（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3660B（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3680（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3680B（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3910（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3980（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3990（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN6740（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8832（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8840（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8845（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8845H（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って修正策や緩和策を適用するか、修正策や緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-33107」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33107", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33107", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-12-05T03:04:29.196Z", "modifiedAt": "2025-10-21T23:05:30.590Z", "fetchedAt": "2026-10-24T05:23:24.139Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.", "sourceTitle": "Integer Overflow or Wraparound in Graphics Linux", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "315 5G IoT Modem" }, { "status": "affected", "version": "APQ8017" }, { "status": "affected", "version": "APQ8064AU" }, { "status": "affected", "version": "AQT1000" }, { "status": "affected", "version": "AR8031" }, { "status": "affected", "version": "AR8035" }, { "status": "affected", "version": "C-V2X 9150" }, { "status": "affected", "version": "CSRA6620" }, { "status": "affected", "version": "CSRA6640" }, { "status": "affected", "version": "CSRB31024" }, { "status": "affected", "version": "FastConnect 6200" }, { "status": "affected", "version": "FastConnect 6700" }, { "status": "affected", "version": "FastConnect 6800" }, { "status": "affected", "version": "FastConnect 6900" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "Flight RB5 5G Platform" }, { "status": "affected", "version": "MDM9250" }, { "status": "affected", "version": "MDM9650" }, { "status": "affected", "version": "MSM8108" }, { "status": "affected", "version": "MSM8209" }, { "status": "affected", "version": "MSM8608" }, { "status": "affected", "version": "MSM8909W" }, { "status": "affected", "version": "MSM8996AU" }, { "status": "affected", "version": "QAM8255P" }, { "status": "affected", "version": "QAM8295P" }, { "status": "affected", "version": "QAM8650P" }, { "status": "affected", "version": "QAM8775P" }, { "status": "affected", "version": "QCA6174A" }, { "status": "affected", "version": "QCA6310" }, { "status": "affected", "version": "QCA6320" }, { "status": "affected", "version": "QCA6335" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCA6420" }, { "status": "affected", "version": "QCA6421" }, { "status": "affected", "version": "QCA6426" }, { "status": "affected", "version": "QCA6430" }, { "status": "affected", "version": "QCA6431" }, { "status": "affected", "version": "QCA6436" }, { "status": "affected", "version": "QCA6564" }, { "status": "affected", "version": "QCA6564A" }, { "status": "affected", "version": "QCA6564AU" }, { "status": "affected", "version": "QCA6574" }, { "status": "affected", "version": "QCA6574A" }, { "status": "affected", "version": "QCA6574AU" }, { "status": "affected", "version": "QCA6595" }, { "status": "affected", "version": "QCA6595AU" }, { "status": "affected", "version": "QCA6696" }, { "status": "affected", "version": "QCA6698AQ" }, { "status": "affected", "version": "QCA6797AQ" }, { "status": "affected", "version": "QCA8081" }, { "status": "affected", "version": "QCA8337" }, { "status": "affected", "version": "QCA9377" }, { "status": "affected", "version": "QCM2290" }, { "status": "affected", "version": "QCM4290" }, { "status": "affected", "version": "QCM4325" }, { "status": "affected", "version": "QCM4490" }, { "status": "affected", "version": "QCM5430" }, { "status": "affected", "version": "QCM6125" }, { "status": "affected", "version": "QCM6490" }, { "status": "affected", "version": "QCM8550" }, { "status": "affected", "version": "QCN6024" }, { "status": "affected", "version": "QCN9011" }, { "status": "affected", "version": "QCN9012" }, { "status": "affected", "version": "QCN9024" }, { "status": "affected", "version": "QCN9074" }, { "status": "affected", "version": "QCS2290" }, { "status": "affected", "version": "QCS410" }, { "status": "affected", "version": "QCS4290" }, { "status": "affected", "version": "QCS4490" }, { "status": "affected", "version": "QCS5430" }, { "status": "affected", "version": "QCS610" }, { "status": "affected", "version": "QCS6125" }, { "status": "affected", "version": "QCS6490" }, { "status": "affected", "version": "QCS7230" }, { "status": "affected", "version": "QCS8155" }, { "status": "affected", "version": "QCS8250" }, { "status": "affected", "version": "QCS8550" }, { "status": "affected", "version": "QRB5165M" }, { "status": "affected", "version": "QRB5165N" }, { "status": "affected", "version": "QSM8250" }, { "status": "affected", "version": "Qualcomm 205 Mobile Platform" }, { "status": "affected", "version": "Qualcomm 215 Mobile Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC1 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC5 Platform" }, { "status": "affected", "version": "Robotics RB3 Platform" }, { "status": "affected", "version": "Robotics RB5 Platform" }, { "status": "affected", "version": "SA4150P" }, { "status": "affected", "version": "SA4155P" }, { "status": "affected", "version": "SA6145P" }, { "status": "affected", "version": "SA6150P" }, { "status": "affected", "version": "SA6155" }, { "status": "affected", "version": "SA6155P" }, { "status": "affected", "version": "SA8145P" }, { "status": "affected", "version": "SA8150P" }, { "status": "affected", "version": "SA8155" }, { "status": "affected", "version": "SA8155P" }, { "status": "affected", "version": "SA8195P" }, { "status": "affected", "version": "SA8255P" }, { "status": "affected", "version": "SA8295P" }, { "status": "affected", "version": "SA8770P" }, { "status": "affected", "version": "SA8775P" }, { "status": "affected", "version": "SA9000P" }, { "status": "affected", "version": "SD 675" }, { "status": "affected", "version": "SD 8 Gen1 5G" }, { "status": "affected", "version": "SD626" }, { "status": "affected", "version": "SD660" }, { "status": "affected", "version": "SD670" }, { "status": "affected", "version": "SD675" }, { "status": "affected", "version": "SD730" }, { "status": "affected", "version": "SD835" }, { "status": "affected", "version": "SD855" }, { "status": "affected", "version": "SD865 5G" }, { "status": "affected", "version": "SD888" }, { "status": "affected", "version": "SDM429W" }, { "status": "affected", "version": "SDX20M" }, { "status": "affected", "version": "SDX55" }, { "status": "affected", "version": "SG4150P" }, { "status": "affected", "version": "SG8275P" }, { "status": "affected", "version": "SM4125" }, { "status": "affected", "version": "SM6250" }, { "status": "affected", "version": "SM7250P" }, { "status": "affected", "version": "SM7315" }, { "status": "affected", "version": "SM7325P" }, { "status": "affected", "version": "SM8550P" }, { "status": "affected", "version": "Smart Audio 200 Platform" }, { "status": "affected", "version": "Smart Audio 400 Platform" }, { "status": "affected", "version": "Smart Display 200 Platform (APQ5053-AA)" }, { "status": "affected", "version": "Snapdragon 208 Processor" }, { "status": "affected", "version": "Snapdragon 210 Processor" }, { "status": "affected", "version": "Snapdragon 212 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 425 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 429 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 439 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 460 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)" }, { "status": "affected", "version": "Snapdragon 625 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 626 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 630 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 632 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 636 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 660 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 662 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 665 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 670 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 675 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 678 Mobile Platform (SM6150-AC)" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon 690 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 695 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 710 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 720G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 730 Mobile Platform (SM7150-AA)" }, { "status": "affected", "version": "Snapdragon 730G Mobile Platform (SM7150-AB)" }, { "status": "affected", "version": "Snapdragon 732G Mobile Platform (SM7150-AC)" }, { "status": "affected", "version": "Snapdragon 750G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)" }, { "status": "affected", "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)" }, { "status": "affected", "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)" }, { "status": "affected", "version": "Snapdragon 778G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)" }, { "status": "affected", "version": "Snapdragon 780G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)" }, { "status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute" }, { "status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 820 Automotive Platform" }, { "status": "affected", "version": "Snapdragon 835 Mobile PC Platform" }, { "status": "affected", "version": "Snapdragon 845 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)" }, { "status": "affected", "version": "Snapdragon 865 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)" }, { "status": "affected", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)" }, { "status": "affected", "version": "Snapdragon 888 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)" }, { "status": "affected", "version": "Snapdragon AR2 Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon Auto 5G Modem-RF" }, { "status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform" }, { "status": "affected", "version": "Snapdragon Wear 2100 Platform" }, { "status": "affected", "version": "Snapdragon Wear 2500 Platform" }, { "status": "affected", "version": "Snapdragon Wear 3100 Platform" }, { "status": "affected", "version": "Snapdragon Wear 4100+ Platform" }, { "status": "affected", "version": "Snapdragon X12 LTE Modem" }, { "status": "affected", "version": "Snapdragon X20 LTE Modem" }, { "status": "affected", "version": "Snapdragon X24 LTE Modem" }, { "status": "affected", "version": "Snapdragon X50 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon X55 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon X65 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon XR1 Platform" }, { "status": "affected", "version": "Snapdragon XR2 5G Platform" }, { "status": "affected", "version": "Snapdragon XR2+ Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon Auto 4G Modem" }, { "status": "affected", "version": "SSG2115P" }, { "status": "affected", "version": "SSG2125P" }, { "status": "affected", "version": "SW5100" }, { "status": "affected", "version": "SW5100P" }, { "status": "affected", "version": "SXR1120" }, { "status": "affected", "version": "SXR1230P" }, { "status": "affected", "version": "SXR2130" }, { "status": "affected", "version": "SXR2230P" }, { "status": "affected", "version": "Vision Intelligence 100 Platform (APQ8053-AA)" }, { "status": "affected", "version": "Vision Intelligence 200 Platform (APQ8053-AC)" }, { "status": "affected", "version": "Vision Intelligence 300 Platform" }, { "status": "affected", "version": "Vision Intelligence 400 Platform" }, { "status": "affected", "version": "WCD9326" }, { "status": "affected", "version": "WCD9335" }, { "status": "affected", "version": "WCD9340" }, { "status": "affected", "version": "WCD9341" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9371" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9380" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCD9390" }, { "status": "affected", "version": "WCD9395" }, { "status": "affected", "version": "WCN3610" }, { "status": "affected", "version": "WCN3615" }, { "status": "affected", "version": "WCN3620" }, { "status": "affected", "version": "WCN3660B" }, { "status": "affected", "version": "WCN3680" }, { "status": "affected", "version": "WCN3680B" }, { "status": "affected", "version": "WCN3910" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3980" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN3990" }, { "status": "affected", "version": "WCN6740" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8832" }, { "status": "affected", "version": "WSA8835" }, { "status": "affected", "version": "WSA8840" }, { "status": "affected", "version": "WSA8845" }, { "status": "affected", "version": "WSA8845H" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-33107", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "fetchedAt": "2026-10-24T05:23:24.139Z", "publishedAt": "2023-12-05T03:04:29.196Z", "modifiedAt": "2025-10-21T23:05:30.590Z", "state": "published", "provider": "qualcomm", "title": "Integer Overflow or Wraparound in Graphics Linux", "descriptions": [ { "lang": "en", "value": "Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "315 5G IoT Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "APQ8017", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "APQ8064AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "AQT1000", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "AR8031", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "AR8035", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "C-V2X 9150", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "CSRA6620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "CSRA6640", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "CSRB31024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "FastConnect 6200", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "FastConnect 6700", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "FastConnect 6800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "FastConnect 6900", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "Flight RB5 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "MDM9250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "MDM9650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "MSM8108", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "MSM8209", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "MSM8608", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "MSM8909W", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "MSM8996AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "QAM8255P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "QAM8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "QAM8650P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "QAM8775P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "QCA6174A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "QCA6310", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "QCA6320", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "QCA6335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "QCA6420", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "QCA6421", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "QCA6426", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "QCA6430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "QCA6431", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "QCA6436", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "QCA6564", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "QCA6564A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "QCA6564AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "QCA6574", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "QCA6574A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "QCA6574AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "QCA6595", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "QCA6595AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "QCA6696", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "QCA6698AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "QCA6797AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "QCA8081", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "QCA8337", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "QCA9377", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "QCM2290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "QCM4290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "QCM4325", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "QCM4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "QCM5430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "QCM6125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "QCM6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "QCM8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "QCN6024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "QCN9011", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "QCN9012", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "QCN9024", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "QCN9074", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "QCS2290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "QCS410", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "QCS4290", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "QCS4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "QCS5430", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "QCS610", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "QCS6125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "QCS6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "QCS7230", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "QCS8155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "QCS8250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "QCS8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "QRB5165M", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "QRB5165N", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "QSM8250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "Qualcomm 205 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "Qualcomm 215 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "Qualcomm Video Collaboration VC1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "Qualcomm Video Collaboration VC3 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "Qualcomm Video Collaboration VC5 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "Robotics RB3 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "Robotics RB5 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "SA4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "SA4155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "SA6145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "SA6150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "SA6155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "SA6155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "SA8145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "SA8150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "SA8155", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "SA8155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "SA8195P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "SA8255P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "SA8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "SA8770P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "SA8775P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "SA9000P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "SD 675", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "SD 8 Gen1 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "SD626", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "SD660", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "SD670", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "SD675", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "SD730", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "SD835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "SD855", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "SD865 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "SD888", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "SDM429W", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "SDX20M", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "SDX55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "SG4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "SG8275P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "SM4125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "SM6250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "SM7250P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "SM7315", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "SM7325P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "SM8550P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "Smart Audio 200 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "Smart Audio 400 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "Smart Display 200 Platform (APQ5053-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "Snapdragon 208 Processor", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "Snapdragon 210 Processor", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "Snapdragon 212 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "Snapdragon 4 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "Snapdragon 4 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "Snapdragon 425 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "Snapdragon 429 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "Snapdragon 439 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "Snapdragon 460 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "Snapdragon 480 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "Snapdragon 625 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "Snapdragon 626 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "Snapdragon 630 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "Snapdragon 632 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "Snapdragon 636 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "Snapdragon 660 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "Snapdragon 662 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "Snapdragon 665 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "Snapdragon 670 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "Snapdragon 675 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "Snapdragon 678 Mobile Platform (SM6150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "Snapdragon 690 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "Snapdragon 695 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "Snapdragon 710 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "Snapdragon 720G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "Snapdragon 730 Mobile Platform (SM7150-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "Snapdragon 730G Mobile Platform (SM7150-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "Snapdragon 732G Mobile Platform (SM7150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "Snapdragon 750G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "Snapdragon 778G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "Snapdragon 780G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "Snapdragon 7c+ Gen 3 Compute", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "Snapdragon 8 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "Snapdragon 8 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "Snapdragon 8+ Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "Snapdragon 8+ Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "Snapdragon 820 Automotive Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "Snapdragon 835 Mobile PC Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "Snapdragon 845 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "Snapdragon 855 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "Snapdragon 865 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "Snapdragon 888 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "Snapdragon AR2 Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "Snapdragon Auto 5G Modem-RF", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "Snapdragon W5+ Gen 1 Wearable Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "Snapdragon Wear 2100 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "Snapdragon Wear 2500 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "Snapdragon Wear 3100 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "Snapdragon Wear 4100+ Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "Snapdragon X12 LTE Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "Snapdragon X20 LTE Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "Snapdragon X24 LTE Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "Snapdragon X50 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "Snapdragon X55 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "Snapdragon X65 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "Snapdragon XR1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "Snapdragon XR2 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "Snapdragon XR2+ Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "Snapdragon Auto 4G Modem", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "SSG2115P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "SSG2125P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "SW5100", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "SW5100P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "SXR1120", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "SXR1230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "SXR2130", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "SXR2230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "Vision Intelligence 100 Platform (APQ8053-AA)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "Vision Intelligence 200 Platform (APQ8053-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "Vision Intelligence 300 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "Vision Intelligence 400 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "WCD9326", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "WCD9335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "WCD9340", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "WCD9341", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "WCD9371", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "WCD9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "WCD9390", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "WCD9395", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "WCN3610", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "WCN3615", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "WCN3620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "WCN3660B", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "WCN3680", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "WCN3680B", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "WCN3910", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "WCN3980", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "WCN3990", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "WCN6740", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/235", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/236", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/237", "version": "WSA8832", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/238", "version": "WSA8835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/239", "version": "WSA8840", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/240", "version": "WSA8845", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/241", "version": "WSA8845H", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-190", "lang": "en", "description": "CWE-190 Integer Overflow or Wraparound", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33107", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Voice & Music\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"315 5G IoT Modem\"},{\"status\":\"affected\",\"version\":\"APQ8017\"},{\"status\":\"affected\",\"version\":\"APQ8064AU\"},{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"AR8031\"},{\"status\":\"affected\",\"version\":\"AR8035\"},{\"status\":\"affected\",\"version\":\"C-V2X 9150\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"CSRB31024\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"Flight RB5 5G Platform\"},{\"status\":\"affected\",\"version\":\"MDM9250\"},{\"status\":\"affected\",\"version\":\"MDM9650\"},{\"status\":\"affected\",\"version\":\"MSM8108\"},{\"status\":\"affected\",\"version\":\"MSM8209\"},{\"status\":\"affected\",\"version\":\"MSM8608\"},{\"status\":\"affected\",\"version\":\"MSM8909W\"},{\"status\":\"affected\",\"version\":\"MSM8996AU\"},{\"status\":\"affected\",\"version\":\"QAM8255P\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QAM8650P\"},{\"status\":\"affected\",\"version\":\"QAM8775P\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6310\"},{\"status\":\"affected\",\"version\":\"QCA6320\"},{\"status\":\"affected\",\"version\":\"QCA6335\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6420\"},{\"status\":\"affected\",\"version\":\"QCA6421\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6430\"},{\"status\":\"affected\",\"version\":\"QCA6431\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6564\"},{\"status\":\"affected\",\"version\":\"QCA6564A\"},{\"status\":\"affected\",\"version\":\"QCA6564AU\"},{\"status\":\"affected\",\"version\":\"QCA6574\"},{\"status\":\"affected\",\"version\":\"QCA6574A\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCA6797AQ\"},{\"status\":\"affected\",\"version\":\"QCA8081\"},{\"status\":\"affected\",\"version\":\"QCA8337\"},{\"status\":\"affected\",\"version\":\"QCA9377\"},{\"status\":\"affected\",\"version\":\"QCM2290\"},{\"status\":\"affected\",\"version\":\"QCM4290\"},{\"status\":\"affected\",\"version\":\"QCM4325\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCM5430\"},{\"status\":\"affected\",\"version\":\"QCM6125\"},{\"status\":\"affected\",\"version\":\"QCM6490\"},{\"status\":\"affected\",\"version\":\"QCM8550\"},{\"status\":\"affected\",\"version\":\"QCN6024\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCN9024\"},{\"status\":\"affected\",\"version\":\"QCN9074\"},{\"status\":\"affected\",\"version\":\"QCS2290\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS4290\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"QCS5430\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6125\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"QCS7230\"},{\"status\":\"affected\",\"version\":\"QCS8155\"},{\"status\":\"affected\",\"version\":\"QCS8250\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"QRB5165M\"},{\"status\":\"affected\",\"version\":\"QRB5165N\"},{\"status\":\"affected\",\"version\":\"QSM8250\"},{\"status\":\"affected\",\"version\":\"Qualcomm 205 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm 215 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC5 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB3 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB5 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8255P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SA8770P\"},{\"status\":\"affected\",\"version\":\"SA8775P\"},{\"status\":\"affected\",\"version\":\"SA9000P\"},{\"status\":\"affected\",\"version\":\"SD 675\"},{\"status\":\"affected\",\"version\":\"SD 8 Gen1 5G\"},{\"status\":\"affected\",\"version\":\"SD626\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD670\"},{\"status\":\"affected\",\"version\":\"SD675\"},{\"status\":\"affected\",\"version\":\"SD730\"},{\"status\":\"affected\",\"version\":\"SD835\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SD888\"},{\"status\":\"affected\",\"version\":\"SDM429W\"},{\"status\":\"affected\",\"version\":\"SDX20M\"},{\"status\":\"affected\",\"version\":\"SDX55\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"SG8275P\"},{\"status\":\"affected\",\"version\":\"SM4125\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM7250P\"},{\"status\":\"affected\",\"version\":\"SM7315\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 200 Platform\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Smart Display 200 Platform (APQ5053-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 208 Processor\"},{\"status\":\"affected\",\"version\":\"Snapdragon 210 Processor\"},{\"status\":\"affected\",\"version\":\"Snapdragon 212 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 425 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 429 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 439 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 625 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 626 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 630 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 632 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 636 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 665 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 670 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 675 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 678 Mobile Platform (SM6150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 710 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730 Mobile Platform (SM7150-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730G Mobile Platform (SM7150-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 732G Mobile Platform (SM7150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 750G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 780G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 820 Automotive Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 835 Mobile PC Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 845 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR2 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 2100 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 2500 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 3100 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 4100+ Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon X12 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X20 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X24 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X50 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X65 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2+ Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 4G Modem\"},{\"status\":\"affected\",\"version\":\"SSG2115P\"},{\"status\":\"affected\",\"version\":\"SSG2125P\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR1120\"},{\"status\":\"affected\",\"version\":\"SXR1230P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 100 Platform (APQ8053-AA)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 200 Platform (APQ8053-AC)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 300 Platform\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 400 Platform\"},{\"status\":\"affected\",\"version\":\"WCD9326\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9340\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9371\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3610\"},{\"status\":\"affected\",\"version\":\"WCN3615\"},{\"status\":\"affected\",\"version\":\"WCN3620\"},{\"status\":\"affected\",\"version\":\"WCN3660B\"},{\"status\":\"affected\",\"version\":\"WCN3680\"},{\"status\":\"affected\",\"version\":\"WCN3680B\"},{\"status\":\"affected\",\"version\":\"WCN3910\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-190\",\"description\":\"CWE-190 Integer Overflow or Wraparound\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-33107:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-33107:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:30.590Z", "fetchedAt": "2026-10-24T05:23:24.139Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-05T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:24.139Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a66595d6de186b60357374cc724904d06172f3207bdbd54c3a3f2a10c3fd04f7", "sourceModifiedAt": "2025-10-21T23:05:30.590Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Graphics LinuxでIOCTL呼び出し中に共有仮想メモリ領域を割り当てる際、メモリ破損が発生します。", "risk": "この脆弱性は実際に悪用されていることが確認されています。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：315 5G IoT Modem。影響ありとして記載：APQ8017。影響ありとして記載：APQ8064AU。影響ありとして記載：AQT1000。影響ありとして記載：AR8031。影響ありとして記載：AR8035。影響ありとして記載：C-V2X 9150。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：CSRB31024。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：MDM9250。影響ありとして記載：MDM9650。影響ありとして記載：MSM8108。影響ありとして記載：MSM8209。影響ありとして記載：MSM8608。影響ありとして記載：MSM8909W。影響ありとして記載：MSM8996AU。影響ありとして記載：QAM8255P。影響ありとして記載：QAM8295P。影響ありとして記載：QAM8650P。影響ありとして記載：QAM8775P。影響ありとして記載：QCA6174A。影響ありとして記載：QCA6310。影響ありとして記載：QCA6320。影響ありとして記載：QCA6335。影響ありとして記載：QCA6391。影響ありとして記載：QCA6420。影響ありとして記載：QCA6421。影響ありとして記載：QCA6426。影響ありとして記載：QCA6430。影響ありとして記載：QCA6431。影響ありとして記載：QCA6436。影響ありとして記載：QCA6564。影響ありとして記載：QCA6564A。影響ありとして記載：QCA6564AU。影響ありとして記載：QCA6574。影響ありとして記載：QCA6574A。影響ありとして記載：QCA6574AU。影響ありとして記載：QCA6595。影響ありとして記載：QCA6595AU。影響ありとして記載：QCA6696。影響ありとして記載：QCA6698AQ。影響ありとして記載：QCA6797AQ。影響ありとして記載：QCA8081。影響ありとして記載：QCA8337。影響ありとして記載：QCA9377。影響ありとして記載：QCM2290。影響ありとして記載：QCM4290。影響ありとして記載：QCM4325。影響ありとして記載：QCM4490。影響ありとして記載：QCM5430。影響ありとして記載：QCM6125。影響ありとして記載：QCM6490。影響ありとして記載：QCM8550。影響ありとして記載：QCN6024。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCN9024。影響ありとして記載：QCN9074。影響ありとして記載：QCS2290。影響ありとして記載：QCS410。影響ありとして記載：QCS4290。影響ありとして記載：QCS4490。影響ありとして記載：QCS5430。影響ありとして記載：QCS610。影響ありとして記載：QCS6125。影響ありとして記載：QCS6490。影響ありとして記載：QCS7230。影響ありとして記載：QCS8155。影響ありとして記載：QCS8250。影響ありとして記載：QCS8550。影響ありとして記載：QRB5165M。影響ありとして記載：QRB5165N。影響ありとして記載：QSM8250。影響ありとして記載：Robotics RB3 Platform。影響ありとして記載：Robotics RB5 Platform。影響ありとして記載：SA4150P。影響ありとして記載：SA4155P。影響ありとして記載：SA6145P。影響ありとして記載：SA6150P。影響ありとして記載：SA6155。影響ありとして記載：SA6155P。影響ありとして記載：SA8145P。影響ありとして記載：SA8150P。影響ありとして記載：SA8155。影響ありとして記載：SA8155P。影響ありとして記載：SA8195P。影響ありとして記載：SA8255P。影響ありとして記載：SA8295P。影響ありとして記載：SA8770P。影響ありとして記載：SA8775P。影響ありとして記載：SA9000P。影響ありとして記載：SD 675。影響ありとして記載：SD626。影響ありとして記載：SD660。影響ありとして記載：SD670。影響ありとして記載：SD675。影響ありとして記載：SD730。影響ありとして記載：SD835。影響ありとして記載：SD855。影響ありとして記載：SD865 5G。影響ありとして記載：SD888。影響ありとして記載：SDM429W。影響ありとして記載：SDX20M。影響ありとして記載：SDX55。影響ありとして記載：SG4150P。影響ありとして記載：SG8275P。影響ありとして記載：SM4125。影響ありとして記載：SM6250。影響ありとして記載：SM7250P。影響ありとして記載：SM7315。影響ありとして記載：SM7325P。影響ありとして記載：SM8550P。影響ありとして記載：Snapdragon 208 Processor。影響ありとして記載：Snapdragon 210 Processor。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：Snapdragon Wear 4100+ Platform。影響ありとして記載：Snapdragon XR1 Platform。影響ありとして記載：Snapdragon XR2+ Gen 1 Platform。影響ありとして記載：SSG2115P。影響ありとして記載：SSG2125P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：SXR1120。影響ありとして記載：SXR1230P。影響ありとして記載：SXR2130。影響ありとして記載：SXR2230P。影響ありとして記載：WCD9326。影響ありとして記載：WCD9335。影響ありとして記載：WCD9340。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9371。影響ありとして記載：WCD9375。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3610。影響ありとして記載：WCN3615。影響ありとして記載：WCN3620。影響ありとして記載：WCN3660B。影響ありとして記載：WCN3680。影響ありとして記載：WCN3680B。影響ありとして記載：WCN3910。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN3990。影響ありとして記載：WCN6740。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33107", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "https://nvd.nist.gov/vuln/detail/CVE-2023-33107" ] } ], "actions": [ { "text": "ベンダーの指示に従って修正策や緩和策を適用するか、修正策や緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2023-33107」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33107", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "https://nvd.nist.gov/vuln/detail/CVE-2023-33107" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33107", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "https://nvd.nist.gov/vuln/detail/CVE-2023-33107" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33107", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "https://nvd.nist.gov/vuln/detail/CVE-2023-33107" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33107", "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "https://nvd.nist.gov/vuln/detail/CVE-2023-33107" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33107", "label": "CVE公式レコード" }, { "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin", "label": "CVE掲載の参考情報" }, { "url": "https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33107", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourceField": "/containers/cna/title", "excerpt": "Integer Overflow or Wraparound in Graphics Linux", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-33107\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33107.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Voice & Music\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"315 5G IoT Modem\"},{\"status\":\"affected\",\"version\":\"APQ8017\"},{\"status\":\"affected\",\"version\":\"APQ8064AU\"},{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"AR8031\"},{\"status\":\"affected\",\"version\":\"AR8035\"},{\"status\":\"affected\",\"version\":\"C-V2X 9150\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"CSRB31024\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"Flight RB5 5G Platform\"},{\"status\":\"affected\",\"version\":\"MDM9250\"},{\"status\":\"affected\",\"version\":\"MDM9650\"},{\"status\":\"affected\",\"version\":\"MSM8108\"},{\"status\":\"affected\",\"version\":\"MSM8209\"},{\"status\":\"affected\",\"version\":\"MSM8608\"},{\"status\":\"affected\",\"version\":\"MSM8909W\"},{\"status\":\"affected\",\"version\":\"MSM8996AU\"},{\"status\":\"affected\",\"version\":\"QAM8255P\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QAM8650P\"},{\"status\":\"affected\",\"version\":\"QAM8775P\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6310\"},{\"status\":\"affected\",\"version\":\"QCA6320\"},{\"status\":\"affected\",\"version\":\"QCA6335\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6420\"},{\"status\":\"affected\",\"version\":\"QCA6421\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6430\"},{\"status\":\"affected\",\"version\":\"QCA6431\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6564\"},{\"status\":\"affected\",\"version\":\"QCA6564A\"},{\"status\":\"affected\",\"version\":\"QCA6564AU\"},{\"status\":\"affected\",\"version\":\"QCA6574\"},{\"status\":\"affected\",\"version\":\"QCA6574A\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCA6797AQ\"},{\"status\":\"affected\",\"version\":\"QCA8081\"},{\"status\":\"affected\",\"version\":\"QCA8337\"},{\"status\":\"affected\",\"version\":\"QCA9377\"},{\"status\":\"affected\",\"version\":\"QCM2290\"},{\"status\":\"affected\",\"version\":\"QCM4290\"},{\"status\":\"affected\",\"version\":\"QCM4325\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCM5430\"},{\"status\":\"affected\",\"version\":\"QCM6125\"},{\"status\":\"affected\",\"version\":\"QCM6490\"},{\"status\":\"affected\",\"version\":\"QCM8550\"},{\"status\":\"affected\",\"version\":\"QCN6024\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCN9024\"},{\"status\":\"affected\",\"version\":\"QCN9074\"},{\"status\":\"affected\",\"version\":\"QCS2290\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS4290\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"QCS5430\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6125\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"QCS7230\"},{\"status\":\"affected\",\"version\":\"QCS8155\"},{\"status\":\"affected\",\"version\":\"QCS8250\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"QRB5165M\"},{\"status\":\"affected\",\"version\":\"QRB5165N\"},{\"status\":\"affected\",\"version\":\"QSM8250\"},{\"status\":\"affected\",\"version\":\"Qualcomm 205 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm 215 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC5 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB3 Platform\"},{\"status\":\"affected\",\"version\":\"Robotics RB5 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8255P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SA8770P\"},{\"status\":\"affected\",\"version\":\"SA8775P\"},{\"status\":\"affected\",\"version\":\"SA9000P\"},{\"status\":\"affected\",\"version\":\"SD 675\"},{\"status\":\"affected\",\"version\":\"SD 8 Gen1 5G\"},{\"status\":\"affected\",\"version\":\"SD626\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD670\"},{\"status\":\"affected\",\"version\":\"SD675\"},{\"status\":\"affected\",\"version\":\"SD730\"},{\"status\":\"affected\",\"version\":\"SD835\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SD888\"},{\"status\":\"affected\",\"version\":\"SDM429W\"},{\"status\":\"affected\",\"version\":\"SDX20M\"},{\"status\":\"affected\",\"version\":\"SDX55\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"SG8275P\"},{\"status\":\"affected\",\"version\":\"SM4125\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM7250P\"},{\"status\":\"affected\",\"version\":\"SM7315\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 200 Platform\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Smart Display 200 Platform (APQ5053-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 208 Processor\"},{\"status\":\"affected\",\"version\":\"Snapdragon 210 Processor\"},{\"status\":\"affected\",\"version\":\"Snapdragon 212 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 425 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 429 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 439 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 625 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 626 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 630 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 632 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 636 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 665 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 670 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 675 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 678 Mobile Platform (SM6150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 710 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730 Mobile Platform (SM7150-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 730G Mobile Platform (SM7150-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 732G Mobile Platform (SM7150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 750G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765 5G Mobile Platform (SM7250-AA)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 765G 5G Mobile Platform (SM7250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 768G 5G Mobile Platform (SM7250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 780G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 820 Automotive Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 835 Mobile PC Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 845 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR2 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 2100 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 2500 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 3100 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Wear 4100+ Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon X12 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X20 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X24 LTE Modem\"},{\"status\":\"affected\",\"version\":\"Snapdragon X50 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon X65 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2+ Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 4G Modem\"},{\"status\":\"affected\",\"version\":\"SSG2115P\"},{\"status\":\"affected\",\"version\":\"SSG2125P\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR1120\"},{\"status\":\"affected\",\"version\":\"SXR1230P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 100 Platform (APQ8053-AA)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 200 Platform (APQ8053-AC)\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 300 Platform\"},{\"status\":\"affected\",\"version\":\"Vision Intelligence 400 Platform\"},{\"status\":\"affected\",\"version\":\"WCD9326\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9340\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9371\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3610\"},{\"status\":\"affected\",\"version\":\"WCN3615\"},{\"status\":\"affected\",\"version\":\"WCN3620\"},{\"status\":\"affected\",\"version\":\"WCN3660B\"},{\"status\":\"affected\",\"version\":\"WCN3680\"},{\"status\":\"affected\",\"version\":\"WCN3680B\"},{\"status\":\"affected\",\"version\":\"WCN3910\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33107", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" } ], "supportRequest": "件名：CVE-2023-33107（Snapdragon）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：315 5G IoT Modem。影響ありとして記載：APQ8017。影響ありとして記載：APQ8064AU。影響ありとして記載：AQT1000。影響ありとして記載：AR8031。影響ありとして記載：AR8035。影響ありとして記載：C-V2X 9150。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：CSRB31024。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：MDM9250。影響ありとして記載：MDM9650。影響ありとして記載：MSM8108。影響ありとして記載：MSM8209。影響ありとして記載：MSM8608。影響ありとして記載：MSM8909W。影響ありとして記載：MSM8996AU。影響ありとして記載：QAM8255P。影響ありとして記載：QAM8295P。影響ありとして記載：QAM8650P。影響ありとして記載：QAM8775P。影響ありとして記載：QCA6174A。影響ありとして記載：QCA6310。影響ありとして記載：QCA6320。影響ありとして記載：QCA6335。影響ありとして記載：QCA6391。影響ありとして記載：QCA6420。影響ありとして記載：QCA6421。影響ありとして記載：QCA6426。影響ありとして記載：QCA6430。影響ありとして記載：QCA6431。影響ありとして記載：QCA6436。影響ありとして記載：QCA6564。影響ありとして記載：QCA6564A。影響ありとして記載：QCA6564AU。影響ありとして記載：QCA6574。影響ありとして記載：QCA6574A。影響ありとして記載：QCA6574AU。影響ありとして記載：QCA6595。影響ありとして記載：QCA6595AU。影響ありとして記載：QCA6696。影響ありとして記載：QCA6698AQ。影響ありとして記載：QCA6797AQ。影響ありとして記載：QCA8081。影響ありとして記載：QCA8337。影響ありとして記載：QCA9377。影響ありとして記載：QCM2290。影響ありとして記載：QCM4290。影響ありとして記載：QCM4325。影響ありとして記載：QCM4490。影響ありとして記載：QCM5430。影響ありとして記載：QCM6125。影響ありとして記載：QCM6490。影響ありとして記載：QCM8550。影響ありとして記載：QCN6024。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCN9024。影響ありとして記載：QCN9074。影響ありとして記載：QCS2290。影響ありとして記載：QCS410。影響ありとして記載：QCS4290。影響ありとして記載：QCS4490。影響ありとして記載：QCS5430。影響ありとして記載：QCS610。影響ありとして記載：QCS6125。影響ありとして記載：QCS6490。影響ありとして記載：QCS7230。影響ありとして記載：QCS8155。影響ありとして記載：QCS8250。影響ありとして記載：QCS8550。影響ありとして記載：QRB5165M。影響ありとして記載：QRB5165N。影響ありとして記載：QSM8250。影響ありとして記載：Robotics RB3 Platform。影響ありとして記載：Robotics RB5 Platform。影響ありとして記載：SA4150P。影響ありとして記載：SA4155P。影響ありとして記載：SA6145P。影響ありとして記載：SA6150P。影響ありとして記載：SA6155。影響ありとして記載：SA6155P。影響ありとして記載：SA8145P。影響ありとして記載：SA8150P。影響ありとして記載：SA8155。影響ありとして記載：SA8155P。影響ありとして記載：SA8195P。影響ありとして記載：SA8255P。影響ありとして記載：SA8295P。影響ありとして記載：SA8770P。影響ありとして記載：SA8775P。影響ありとして記載：SA9000P。影響ありとして記載：SD 675。影響ありとして記載：SD626。影響ありとして記載：SD660。影響ありとして記載：SD670。影響ありとして記載：SD675。影響ありとして記載：SD730。影響ありとして記載：SD835。影響ありとして記載：SD855。影響ありとして記載：SD865 5G。影響ありとして記載：SD888。影響ありとして記載：SDM429W。影響ありとして記載：SDX20M。影響ありとして記載：SDX55。影響ありとして記載：SG4150P。影響ありとして記載：SG8275P。影響ありとして記載：SM4125。影響ありとして記載：SM6250。影響ありとして記載：SM7250P。影響ありとして記載：SM7315。影響ありとして記載：SM7325P。影響ありとして記載：SM8550P。影響ありとして記載：Snapdragon 208 Processor。影響ありとして記載：Snapdragon 210 Processor。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：Snapdragon Wear 4100+ Platform。影響ありとして記載：Snapdragon XR1 Platform。影響ありとして記載：Snapdragon XR2+ Gen 1 Platform。影響ありとして記載：SSG2115P。影響ありとして記載：SSG2125P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：SXR1120。影響ありとして記載：SXR1230P。影響ありとして記載：SXR2130。影響ありとして記載：SXR2230P。影響ありとして記載：WCD9326。影響ありとして記載：WCD9335。影響ありとして記載：WCD9340。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9371。影響ありとして記載：WCD9375。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3610。影響ありとして記載：WCN3615。影響ありとして記載：WCN3620。影響ありとして記載：WCN3660B。影響ありとして記載：WCN3680。影響ありとして記載：WCN3680B。影響ありとして記載：WCN3910。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN3990。影響ありとして記載：WCN6740。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon Auto、Snapdragon Compute、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-33107", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:24.139Z", "lastSuccess": "2026-10-24T05:23:24.139Z", "sourceCheckedAt": "2026-10-24T05:23:24.139Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-42916", "aliases": [], "title": "Safari / macOS / iOS and iPadOS：情報の漏えい", "summary": "入力検証を強化し、範囲外読み取りを防止する修正が行われました。この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。Web コンテンツを処理する際に機密情報が漏洩する可能性があり、Apple は iOS 16.7.1 より前のバージョンでこの問題が悪用されたとの報告を認識しています。", "risk": "悪意のある Web コンテンツを処理することで機密情報が漏洩する恐れがあります。", "product": "Safari / macOS / iOS and iPadOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "Safari", "range": ">= unspecified / < 17.1" }, { "product": "macOS", "range": ">= unspecified / < 14.1" }, { "product": "iOS and iPadOS", "range": ">= unspecified / < 17.1" } ], "fixed": [], "steps": [ "この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。", "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-42916」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42916", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT214033", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214032", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214031", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/kb/HT214033", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/05/1", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/kb/HT214034", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5575", "label": "CVE掲載の参考情報" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/3", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42916", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-11-30T22:18:49.672Z", "modifiedAt": "2025-10-21T23:05:31.664Z", "fetchedAt": "2026-10-24T05:23:28.620Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "Safari", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "17.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "14.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "17.1", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-42916", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "fetchedAt": "2026-10-24T05:23:28.620Z", "publishedAt": "2023-11-30T22:18:49.672Z", "modifiedAt": "2025-10-21T23:05:31.664Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "Safari", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "17.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "14.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "lessThan": "17.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT214033", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://support.apple.com/en-us/HT214032", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://support.apple.com/en-us/HT214031", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://support.apple.com/kb/HT214033", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/05/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://support.apple.com/kb/HT214034", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "https://www.debian.org/security/2023/dsa-5575", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/3", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/9" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/8", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/12" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/13", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/13" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/12", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/14" }, { "url": "https://security.gentoo.org/glsa/202401-04", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/15" }, { "url": "https://support.apple.com/kb/HT214062", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/16" }, { "url": "http://seclists.org/fulldisclosure/2024/Jan/35", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/17" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42916", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"14.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":6.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-42916:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-42916:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "modifiedAt": "2023-12-04T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:31.664Z", "fetchedAt": "2026-10-24T05:23:28.620Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-04T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Safari / macOS / iOS and iPadOSに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:28.620Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d6e40f1c0219ef099f6f237fce8167588e8784eed042cb2f5cd4f892cfe5e1c6", "sourceModifiedAt": "2025-10-21T23:05:31.664Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "入力検証を強化し、範囲外読み取りを防止する修正が行われました。この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。Web コンテンツを処理する際に機密情報が漏洩する可能性があり、Apple は iOS 16.7.1 より前のバージョンでこの問題が悪用されたとの報告を認識しています。", "risk": "悪意のある Web コンテンツを処理することで機密情報が漏洩する恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2", "E3" ], "applicability": [ { "text": "攻撃者が細工した Web コンテンツを Safari や WebKit を利用する HTML パーサーで処理させた場合に影響します。対象は Apple の Safari、iOS、iPadOS、macOS だけでなく、WebKit を利用する非 Apple 製品も含まれます。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / Safari。影響ありとして記載：17.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：14.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：17.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Safari / macOS / iOS and iPadOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42916", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "https://nvd.nist.gov/vuln/detail/CVE-2023-42916" ] } ], "actions": [ { "text": "この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json" ] }, { "text": "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916" ], "evidenceIds": [ "E7", "E8" ] }, { "text": "「CVE-2023-42916」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42916", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "https://nvd.nist.gov/vuln/detail/CVE-2023-42916" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42916", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "https://nvd.nist.gov/vuln/detail/CVE-2023-42916" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42916", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "https://nvd.nist.gov/vuln/detail/CVE-2023-42916" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42916", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "https://nvd.nist.gov/vuln/detail/CVE-2023-42916" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42916", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT214033", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214032", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214031", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/kb/HT214033", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/05/1", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/kb/HT214034", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5575", "label": "CVE掲載の参考情報" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/3", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42916", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "sourceField": "retained:/originalText", "excerpt": "Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"14.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42916.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "sourceField": "/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42916", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-42916\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-42916（Safari / macOS / iOS and iPadOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が細工した Web コンテンツを Safari や WebKit を利用する HTML パーサーで処理させた場合に影響します。対象は Apple の Safari、iOS、iPadOS、macOS だけでなく、WebKit を利用する非 Apple 製品も含まれます。\n・公式の対象表：Apple / Safari。影響ありとして記載：17.1未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：14.1未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：17.1未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-42916", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:28.620Z", "lastSuccess": "2026-10-24T05:23:28.620Z", "sourceCheckedAt": "2026-10-24T05:23:28.620Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-42917", "aliases": [], "title": "Safari / macOS / iOS and iPadOS：コード実行", "summary": "メモリ破損の脆弱性がロック機構の改善により対策されました。この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。ウェブコンテンツを処理する際に任意のコードが実行される可能性があり、Apple は iOS 16.7.1 より前のバージョンでこの問題が悪用されたとの報告を認識しています。", "risk": "悪意のあるウェブコンテンツを処理すると、任意のコードが実行される可能性があります。", "product": "Safari / macOS / iOS and iPadOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "Safari", "range": ">= unspecified / < 17.1" }, { "product": "macOS", "range": ">= unspecified / < 14.1" }, { "product": "iOS and iPadOS", "range": ">= unspecified / < 17.1" } ], "fixed": [], "steps": [ "この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。", "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が利用できない場合は製品の使用を中止します。", "「CVE-2023-42917」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42917", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT214033", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214032", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214031", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/kb/HT214033", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/05/1", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/kb/HT214034", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5575", "label": "CVE掲載の参考情報" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/3", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-11-30T22:18:50.340Z", "modifiedAt": "2025-10-21T23:05:31.441Z", "fetchedAt": "2026-10-24T05:23:33.102Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "Safari", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "17.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "14.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "17.1", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-42917", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "fetchedAt": "2026-10-24T05:23:33.102Z", "publishedAt": "2023-11-30T22:18:50.340Z", "modifiedAt": "2025-10-21T23:05:31.441Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "Safari", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "17.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "14.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "lessThan": "17.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT214033", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://support.apple.com/en-us/HT214032", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://support.apple.com/en-us/HT214031", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://support.apple.com/kb/HT214033", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/05/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://support.apple.com/kb/HT214034", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://www.debian.org/security/2023/dsa-5575", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/3", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/8", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/13", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/12", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/14" }, { "url": "https://security.gentoo.org/glsa/202401-04", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/15" }, { "url": "https://support.apple.com/kb/HT214062", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/16" }, { "url": "http://seclists.org/fulldisclosure/2024/Jan/35", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/17" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42917", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"14.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-42917:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-42917:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "modifiedAt": "2023-12-04T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:31.441Z", "fetchedAt": "2026-10-24T05:23:33.102Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-12-04T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Safari / macOS / iOS and iPadOSにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:33.102Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "275b5994456cb5b5ee05ee4a34363d796bfa3eede5ecb66a0baefaa92d82f78f", "sourceModifiedAt": "2025-10-21T23:05:31.441Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "メモリ破損の脆弱性がロック機構の改善により対策されました。この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。ウェブコンテンツを処理する際に任意のコードが実行される可能性があり、Apple は iOS 16.7.1 より前のバージョンでこの問題が悪用されたとの報告を認識しています。", "risk": "悪意のあるウェブコンテンツを処理すると、任意のコードが実行される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "iOS、iPadOS、macOS、Safari のいずれかで WebKit が使用されている環境において、悪意のあるウェブコンテンツを処理する際に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Apple / Safari。影響ありとして記載：17.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：14.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：17.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Safari / macOS / iOS and iPadOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42917", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "https://nvd.nist.gov/vuln/detail/CVE-2023-42917" ] } ], "actions": [ { "text": "この問題は iOS 17.1.2、iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2 で修正されています。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json" ] }, { "text": "ベンダーの指示に従って修正プログラムや緩和策を適用するか、修正や緩和策が利用できない場合は製品の使用を中止します。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917" ], "evidenceIds": [ "E6" ] }, { "text": "「CVE-2023-42917」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42917", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "https://nvd.nist.gov/vuln/detail/CVE-2023-42917" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42917", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "https://nvd.nist.gov/vuln/detail/CVE-2023-42917" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42917", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "https://nvd.nist.gov/vuln/detail/CVE-2023-42917" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42917", "https://support.apple.com/en-us/HT214033", "https://support.apple.com/en-us/HT214032", "https://support.apple.com/en-us/HT214031", "https://support.apple.com/kb/HT214033", "http://www.openwall.com/lists/oss-security/2023/12/05/1", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "https://support.apple.com/kb/HT214034", "https://www.debian.org/security/2023/dsa-5575", "http://seclists.org/fulldisclosure/2023/Dec/3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "https://nvd.nist.gov/vuln/detail/CVE-2023-42917" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42917", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT214033", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214032", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT214031", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/kb/HT214033", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/12/05/1", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/kb/HT214034", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5575", "label": "CVE掲載の参考情報" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/3", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "sourceField": "retained:/originalText", "excerpt": "Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"14.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42917.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"17.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "sourceField": "retained:/sourceAction", "excerpt": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42917", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-42917\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-42917（Safari / macOS / iOS and iPadOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・iOS、iPadOS、macOS、Safari のいずれかで WebKit が使用されている環境において、悪意のあるウェブコンテンツを処理する際に影響を受けます。\n・公式の対象表：Apple / Safari。影響ありとして記載：17.1未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：14.1未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：17.1未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-42917", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:33.102Z", "lastSuccess": "2026-10-24T05:23:33.102Z", "sourceCheckedAt": "2026-10-24T05:23:33.102Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-49103", "aliases": [], "title": "n/a：脆弱性情報", "summary": "ownCloud の graphapi アプリ（バージョン 0.2.x 未満 0.2.1、0.3.x 未満 0.3.1）では、サードパーティ製の GetPhpInfo.php ライブラリが提供する URL にアクセスすると PHP の設定情報（phpinfo）が表示され、Web サーバーの環境変数すべてが漏洩します。コンテナ環境では管理者パスワードやメールサーバーの認証情報、ライセンスキーなどの機密情報が環境変数に含まれることがあり、これらも漏洩対象となります。graphapi アプリを無効化しても脆弱性は解消されません。コンテナ以外でも phpinfo が示す設定情報は攻撃者に利用され得るため、注意が必要です。2023 年 2 月以前に作成された Docker コンテナはこの情報漏洩の影響を受けません。", "risk": "phpinfo が公開されることで、管理者パスワードやメールサーバー認証情報、ライセンスキーなどの機密情報が外部に漏洩する可能性があります。", "product": "ownCloud ownCloud graphapi", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N", "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-49103」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-49103", "label": "CVE公式レコード" }, { "url": "https://owncloud.org/security", "label": "CVE掲載の参考情報" }, { "url": "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49103", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-11-21T00:00:00.000Z", "modifiedAt": "2025-10-21T23:05:32.034Z", "fetchedAt": "2026-10-24T05:23:42.110Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-49103", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "fetchedAt": "2026-10-24T05:23:42.110Z", "publishedAt": "2023-11-21T00:00:00.000Z", "modifiedAt": "2025-10-21T23:05:32.034Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://owncloud.org/security", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49103", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-49103:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "sourcePath": "retained:/originalText", "text": "ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-49103:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "modifiedAt": "2023-11-30T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:32.034Z", "fetchedAt": "2026-10-24T05:23:42.110Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-11-30T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:42.110Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e39bf68692d2951f5934ef35c341890acd410dd15e4d2848fa92c76f7c2ec49f", "sourceModifiedAt": "2025-10-21T23:05:32.034Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ownCloud の graphapi アプリ（バージョン 0.2.x 未満 0.2.1、0.3.x 未満 0.3.1）では、サードパーティ製の GetPhpInfo.php ライブラリが提供する URL にアクセスすると PHP の設定情報（phpinfo）が表示され、Web サーバーの環境変数すべてが漏洩します。コンテナ環境では管理者パスワードやメールサーバーの認証情報、ライセンスキーなどの機密情報が環境変数に含まれることがあり、これらも漏洩対象となります。graphapi アプリを無効化しても脆弱性は解消されません。コンテナ以外でも phpinfo が示す設定情報は攻撃者に利用され得るため、注意が必要です。2023 年 2 月以前に作成された Docker コンテナはこの情報漏洩の影響を受けません。", "risk": "phpinfo が公開されることで、管理者パスワードやメールサーバー認証情報、ライセンスキーなどの機密情報が外部に漏洩する可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は ownCloud graphapi アプリのバージョン 0.2.x（0.2.1 未満）または 0.3.x（0.3.1 未満）です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E1" ] }, { "text": "GetPhpInfo.php が提供する URL に外部からアクセスできることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E1" ] }, { "text": "コンテナ化されたデプロイメントで、環境変数に管理者パスワードやメールサーバー認証情報、ライセンスキーが設定されている場合に機密情報が漏洩します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E1" ] }, { "text": "graphapi アプリを無効化しても、phpinfo の情報漏洩は解消されません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E1" ] }, { "text": "コンテナ以外の環境でも phpinfo が公開されると、システム情報が取得され攻撃に利用され得ます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E1" ] }, { "text": "2023 年 2 月以前に作成された Docker コンテナは、この情報漏洩の影響を受けません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E2" ] }, { "text": "「ownCloud ownCloud graphapi」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-49103", "https://owncloud.org/security", "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "https://nvd.nist.gov/vuln/detail/CVE-2023-49103" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103" ], "evidenceIds": [ "E3" ] }, { "text": "「CVE-2023-49103」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-49103", "https://owncloud.org/security", "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "https://nvd.nist.gov/vuln/detail/CVE-2023-49103" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-49103", "https://owncloud.org/security", "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "https://nvd.nist.gov/vuln/detail/CVE-2023-49103" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-49103", "https://owncloud.org/security", "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "https://nvd.nist.gov/vuln/detail/CVE-2023-49103" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-49103", "https://owncloud.org/security", "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "https://nvd.nist.gov/vuln/detail/CVE-2023-49103" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-49103", "label": "CVE公式レコード" }, { "url": "https://owncloud.org/security", "label": "CVE掲載の参考情報" }, { "url": "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49103", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/49xxx/CVE-2023-49103.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49103", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-49103\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-49103（ownCloud ownCloud graphapi）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は ownCloud graphapi アプリのバージョン 0.2.x（0.2.1 未満）または 0.3.x（0.3.1 未満）です。\n・GetPhpInfo.php が提供する URL に外部からアクセスできることが前提です。\n・コンテナ化されたデプロイメントで、環境変数に管理者パスワードやメールサーバー認証情報、ライセンスキーが設定されている場合に機密情報が漏洩します。\n・graphapi アプリを無効化しても、phpinfo の情報漏洩は解消されません。\n・コンテナ以外の環境でも phpinfo が公開されると、システム情報が取得され攻撃に利用され得ます。\n・2023 年 2 月以前に作成された Docker コンテナは、この情報漏洩の影響を受けません。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-49103", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:42.110Z", "lastSuccess": "2026-10-24T05:23:42.110Z", "sourceCheckedAt": "2026-10-24T05:23:42.110Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-6345", "aliases": [], "title": "Chrome：脆弱性情報", "summary": "Google Chrome の Skia に整数オーバーフローがあり、バージョン 119.0.6045.199 未満の Chrome では、レンダラープロセスがすでに侵害されているリモート攻撃者が、悪意のあるファイルを使ってサンドボックスから脱出できる可能性があります。", "risk": "攻撃者はサンドボックスを脱出し、システム上で更なる操作が可能になる可能性があります。", "product": "Chrome", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 119.0.6045.199 / < 119.0.6045.199" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-6345」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-6345", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "label": "CISAが示す関連情報" }, { "url": "https://crbug.com/1505053", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5569", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "label": "CVE掲載の参考情報" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6345", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-11-29T12:02:05.401Z", "modifiedAt": "2025-10-21T23:05:31.869Z", "fetchedAt": "2026-10-24T08:13:07.158Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "119.0.6045.199", "status": "affected", "lessThan": "119.0.6045.199", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-6345", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "fetchedAt": "2026-10-24T08:13:07.158Z", "publishedAt": "2023-11-29T12:02:05.401Z", "modifiedAt": "2025-10-21T23:05:31.869Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "119.0.6045.199", "lessThan": "119.0.6045.199", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Integer overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://crbug.com/1505053", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.debian.org/security/2023/dsa-5569", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6345", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"119.0.6045.199\",\"status\":\"affected\",\"lessThan\":\"119.0.6045.199\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Integer overflow\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":9.6,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-6345:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "sourcePath": "retained:/originalText", "text": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-6345:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "modifiedAt": "2023-11-30T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:31.869Z", "fetchedAt": "2026-10-24T08:13:07.158Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-11-30T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chromeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:13:07.158Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c30a366026e2004fc396783ee6b2e0a15ca3e1af56b596bdf5171b6b11961d83", "sourceModifiedAt": "2025-10-21T23:05:31.869Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome の Skia に整数オーバーフローがあり、バージョン 119.0.6045.199 未満の Chrome では、レンダラープロセスがすでに侵害されているリモート攻撃者が、悪意のあるファイルを使ってサンドボックスから脱出できる可能性があります。", "risk": "攻撃者はサンドボックスを脱出し、システム上で更なる操作が可能になる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象は Google Chrome のバージョン 119.0.6045.199 未満です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json" ], "evidenceIds": [ "E1" ] }, { "text": "レンダラープロセスが攻撃者によりすでに侵害されていることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者は悪意のあるファイルを用意できることが必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受ける製品は Google Chrome、ChromeOS、Android、Flutter などです。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345" ], "evidenceIds": [ "E2" ] }, { "text": "Skia の整数オーバーフローがトリガーになります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも119.0.6045.199で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-6345", "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "https://crbug.com/1505053", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "https://www.debian.org/security/2023/dsa-5569", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "https://nvd.nist.gov/vuln/detail/CVE-2023-6345" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2023-6345」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-6345", "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "https://crbug.com/1505053", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "https://www.debian.org/security/2023/dsa-5569", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "https://nvd.nist.gov/vuln/detail/CVE-2023-6345" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-6345", "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "https://crbug.com/1505053", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "https://www.debian.org/security/2023/dsa-5569", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "https://nvd.nist.gov/vuln/detail/CVE-2023-6345" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-6345", "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "https://crbug.com/1505053", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "https://www.debian.org/security/2023/dsa-5569", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "https://nvd.nist.gov/vuln/detail/CVE-2023-6345" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-6345", "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "https://crbug.com/1505053", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "https://www.debian.org/security/2023/dsa-5569", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "https://security.gentoo.org/glsa/202401-34", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "https://nvd.nist.gov/vuln/detail/CVE-2023-6345" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-6345", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html", "label": "CISAが示す関連情報" }, { "url": "https://crbug.com/1505053", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/", "label": "CVE掲載の参考情報" }, { "url": "https://www.debian.org/security/2023/dsa-5569", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/", "label": "CVE掲載の参考情報" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6345", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "sourceField": "retained:/originalText", "excerpt": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Integer overflow\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6345.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"119.0.6045.199\",\"status\":\"affected\",\"lessThan\":\"119.0.6045.199\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-6345", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-6345\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-6345（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Google Chrome のバージョン 119.0.6045.199 未満です。\n・レンダラープロセスが攻撃者によりすでに侵害されていることが前提です。\n・攻撃者は悪意のあるファイルを用意できることが必要です。\n・影響を受ける製品は Google Chrome、ChromeOS、Android、Flutter などです。\n・Skia の整数オーバーフローがトリガーになります。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも119.0.6045.199で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-6345", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:13:07.158Z", "lastSuccess": "2026-10-24T08:13:07.158Z", "sourceCheckedAt": "2026-10-24T08:13:07.158Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-4911", "aliases": [], "title": "glibc / Red Hat Enterprise Linux 8 / Red Hat Enterprise Linux 8.6 Extended Update Support / Red Hat Enterprise Linux 9 / Red Hat Enterprise Linux 9.0 Extended Update Support / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 / Red Hat Enterpri：権限の奪取", "summary": "GNU C Library の動的ローダ ld.so が GLIBC_TUNABLES 環境変数を処理する際にバッファオーバーフローが発見されました。この脆弱性により、ローカルの攻撃者が SUID 権限で実行されるバイナリを起動する際に細工した GLIBC_TUNABLES 環境変数を使用して、特権が昇格したコードを実行できる可能性があります。", "risk": "攻撃者は特権が昇格したコードを実行できる可能性があります。", "product": "glibc / Red Hat Enterprise Linux 8 / Red Hat Enterprise Linux 8.6 Extended Update Support / Red Hat Enterprise Linux 9 / Red Hat Enterprise Linux 9.0 Extended Update Support / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 / Red Hat Enterpri", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "redhat", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "glibc", "range": ">= 2.34 / < 2.39" }, { "product": "Red Hat Enterprise Linux 8", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "Red Hat Enterprise Linux 8.6 Extended Update Support", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "Red Hat Enterprise Linux 9", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "Red Hat Enterprise Linux 9.0 Extended Update Support", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4911", "label": "CVE公式レコード" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5453", "label": "RHSA-2023:5453" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5454", "label": "RHSA-2023:5454" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5455", "label": "RHSA-2023:5455" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5476", "label": "RHSA-2023:5476" }, { "url": "https://access.redhat.com/errata/RHSA-2024:0033", "label": "RHSA-2024:0033" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-4911", "label": "CVE掲載の参考情報" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238352", "label": "RHBZ#2238352" }, { "url": "https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt", "label": "CVE掲載の参考情報" }, { "url": "https://www.qualys.com/cve-2023-4911/", "label": "CVE掲載の参考情報" }, { "url": "https://sourceware.org/git/?p=glibc.git", "label": "CISAが示す関連情報" }, { "url": "https://access.redhat.com/security/cve/cve-2023-4911", "label": "CISAが示す関連情報" }, { "url": "https://www.debian.org/security/2023/dsa-5514", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4911", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-10-03T17:25:08.434Z", "modifiedAt": "2026-10-14T21:45:37.956Z", "fetchedAt": "2026-10-24T06:22:42.651Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.", "sourceTitle": "Glibc: buffer overflow in ld.so leading to privilege escalation", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "versions": [ { "status": "affected", "version": "2.34", "lessThan": "2.39", "versionType": "custom" } ], "packageName": "glibc", "collectionURL": "https://sourceware.org/git/glibc.git", "defaultStatus": "unaffected" }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.28-225.el8_8.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/o:redhat:enterprise_linux:8::baseos", "cpe:/a:redhat:enterprise_linux:8::crb" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.28-225.el8_8.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/o:redhat:enterprise_linux:8::baseos", "cpe:/a:redhat:enterprise_linux:8::crb" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Extended Update Support", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.28-189.6.el8_6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/o:redhat:rhel_eus:8.6::baseos", "cpe:/a:redhat:rhel_eus:8.6::appstream", "cpe:/o:redhat:rhev_hypervisor:4.4::el8", "cpe:/a:redhat:rhel_eus:8.6::crb" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.34-60.el9_2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb", "cpe:/o:redhat:enterprise_linux:9::baseos" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.34-60.el9_2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb", "cpe:/o:redhat:enterprise_linux:9::baseos" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.0 Extended Update Support", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.34-28.el9_0.4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:rhel_eus:9.0::appstream", "cpe:/o:redhat:rhel_eus:9.0::baseos", "cpe:/a:redhat:rhel_eus:9.0::crb" ] }, { "vendor": "Red Hat", "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "affected", "versions": [ { "version": "0:2.28-189.6.el8_6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/o:redhat:rhel_eus:8.6::baseos", "cpe:/a:redhat:rhel_eus:8.6::appstream", "cpe:/o:redhat:rhev_hypervisor:4.4::el8", "cpe:/a:redhat:rhel_eus:8.6::crb" ] }, { "vendor": "Red Hat", "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "redhat-release-virtualization-host", "defaultStatus": "affected", "versions": [ { "version": "0:4.5.3-10.el8ev", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/o:redhat:rhev_hypervisor:4.4::el8" ] }, { "vendor": "Red Hat", "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "redhat-virtualization-host", "defaultStatus": "affected", "versions": [ { "version": "0:4.5.3-202312060823_8.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/o:redhat:rhev_hypervisor:4.4::el8" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "unaffected", "cpes": [ "cpe:/o:redhat:enterprise_linux:6" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "compat-glibc", "defaultStatus": "unaffected", "cpes": [ "cpe:/o:redhat:enterprise_linux:7" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "glibc", "defaultStatus": "unaffected", "cpes": [ "cpe:/o:redhat:enterprise_linux:7" ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-4911", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "fetchedAt": "2026-10-24T06:22:42.651Z", "publishedAt": "2023-10-03T17:25:08.434Z", "modifiedAt": "2026-10-14T21:45:37.956Z", "state": "published", "provider": "redhat", "title": "Glibc: buffer overflow in ld.so leading to privilege escalation", "descriptions": [ { "lang": "en", "value": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "", "product": "", "sourcePath": "/containers/cna/affected/0", "packageName": "glibc", "collectionURL": "https://sourceware.org/git/glibc.git", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2.34", "lessThan": "2.39", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "sourcePath": "/containers/cna/affected/1", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/o:redhat:enterprise_linux:8::baseos", "cpe:/a:redhat:enterprise_linux:8::crb" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0:2.28-225.el8_8.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "sourcePath": "/containers/cna/affected/2", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/o:redhat:enterprise_linux:8::baseos", "cpe:/a:redhat:enterprise_linux:8::crb" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "0:2.28-225.el8_8.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Extended Update Support", "sourcePath": "/containers/cna/affected/3", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:rhel_eus:8.6::baseos", "cpe:/a:redhat:rhel_eus:8.6::appstream", "cpe:/o:redhat:rhev_hypervisor:4.4::el8", "cpe:/a:redhat:rhel_eus:8.6::crb" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "0:2.28-189.6.el8_6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "sourcePath": "/containers/cna/affected/4", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb", "cpe:/o:redhat:enterprise_linux:9::baseos" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "0:2.34-60.el9_2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "sourcePath": "/containers/cna/affected/5", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb", "cpe:/o:redhat:enterprise_linux:9::baseos" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "0:2.34-60.el9_2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.0 Extended Update Support", "sourcePath": "/containers/cna/affected/6", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/a:redhat:rhel_eus:9.0::appstream", "cpe:/o:redhat:rhel_eus:9.0::baseos", "cpe:/a:redhat:rhel_eus:9.0::crb" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "0:2.34-28.el9_0.4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "sourcePath": "/containers/cna/affected/7", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:rhel_eus:8.6::baseos", "cpe:/a:redhat:rhel_eus:8.6::appstream", "cpe:/o:redhat:rhev_hypervisor:4.4::el8", "cpe:/a:redhat:rhel_eus:8.6::crb" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "0:2.28-189.6.el8_6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "sourcePath": "/containers/cna/affected/8", "packageName": "redhat-release-virtualization-host", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:rhev_hypervisor:4.4::el8" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "0:4.5.3-10.el8ev", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 8", "sourcePath": "/containers/cna/affected/9", "packageName": "redhat-virtualization-host", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:rhev_hypervisor:4.4::el8" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "0:4.5.3-202312060823_8.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "sourcePath": "/containers/cna/affected/10", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:enterprise_linux:6" ], "programRoutines": [], "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "sourcePath": "/containers/cna/affected/11", "packageName": "compat-glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:enterprise_linux:7" ], "programRoutines": [], "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "sourcePath": "/containers/cna/affected/12", "packageName": "glibc", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:/o:redhat:enterprise_linux:7" ], "programRoutines": [], "versions": [] } ], "solutions": [], "workarounds": [ { "lang": "en", "value": "For customers who cannot update immediately and do not have Secure Boot feature enabled, the issue can be mitigated using the provided SystemTap script with the following steps. When enabled, any setuid program invoked with GLIBC_TUNABLES in the environment will be terminated immediately. To invoke the setuid program, users will then have to unset or clear the GLIBC_TUNABLES envvar, e.g. `GLIBC_TUNABLES= sudo` . \n\nNote that these mitigation steps will need to be repeated if the system is rebooted.\n\n1) Install required systemtap packages and dependencies as per - https://access.redhat.com/solutions/5441\n\n\n2) Create the following systemtap script, and name it stap_block_suid_tunables.stp:\n ~~~\nfunction has_tunable_string:long()\n{\n name = \"GLIBC_TUNABLES\"\n\n mm = @task(task_current())->mm;\n if (mm)\n {\n env_start = @mm(mm)->env_start;\n env_end = @mm(mm)->env_end;\n\n if (env_start != 0 && env_end != 0)\n while (env_end > env_start)\n {\n cur = user_string(env_start, \"\");\n env_name = tokenize(cur, \"=\");\n \n if (env_name == name && tokenize(\"\", \"\") != \"\")\n return 1;\n env_start += strlen (cur) + 1\n }\n }\n\n return 0;\n}\n\nprobe process(\"/lib*/ld*.so*\").function(\"__tunables_init\")\n{\n atsecure = 0;\n /* Skip processing if we can't read __libc_enable_secure, e.g. core dump\n handler (systemd-cgroups-agent and systemd-coredump). */\n try { atsecure = @var(\"__libc_enable_secure\"); }\n catch { printk (4, sprintf (\"CVE-2023-4911: Skipped check: %s (%d)\", execname(), pid())); }\n if (atsecure && has_tunable_string ())\n raise (9);\n}\n~~~\n\n3) Load the systemtap module into the running kernel:\n ~~~\n stap -g -F -m stap_block_suid_tunables stap_block_suid_tunables.stp\n ~~~\n\n4) Ensure the module is loaded:\n ~~~\n lsmod | grep -i stap_block_suid_tunables\nstap_block_suid_tunables 249856 0\n~~~\n\n5) Once the glibc package is updated to the version containing the fix, the systemtap generated kernel module can be removed by running:\n ~~~\n rmmod stap_block_suid_tunables\n ~~~\n\nIf Secure Boot is enabled on a system, the SystemTap module must be signed. An external compiling server can be used to sign the generated kernel module with a key enrolled into the kernel's keyring or starting with SystemTap 4.7 you can sign a module without a compile server. See further information here - https://www.redhat.com/sysadmin/secure-boot-systemtap", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-122", "lang": "en", "description": "Heap-based Buffer Overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "redhat", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://access.redhat.com/errata/RHSA-2023:5453", "label": "RHSA-2023:5453", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5454", "label": "RHSA-2023:5454", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5455", "label": "RHSA-2023:5455", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5476", "label": "RHSA-2023:5476", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/14" }, { "url": "https://access.redhat.com/errata/RHSA-2024:0033", "label": "RHSA-2024:0033", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/15" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-4911", "label": "CVE", "tags": [ "vdb-entry", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/16" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238352", "label": "RHBZ#2238352", "tags": [ "issue-tracking", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/17" }, { "url": "https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/24" }, { "url": "https://www.qualys.com/cve-2023-4911/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/25" }, { "url": "https://www.exploit-db.com/exploits/52479", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://seclists.org/fulldisclosure/2023/Oct/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/03/2", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/03/3", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/05/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/13/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/14/3", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/14/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/14/6", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/18" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/19" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/20" }, { "url": "https://security.gentoo.org/glsa/202310-03", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/21" }, { "url": "https://security.netapp.com/advisory/ntap-20231013-0006/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/22" }, { "url": "https://www.debian.org/security/2023/dsa-5514", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/23" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/1" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"versions\":[{\"status\":\"affected\",\"version\":\"2.34\",\"lessThan\":\"2.39\",\"versionType\":\"custom\"}],\"packageName\":\"glibc\",\"collectionURL\":\"https://sourceware.org/git/glibc.git\",\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-225.el8_8.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\",\"cpe:/o:redhat:enterprise_linux:8::baseos\",\"cpe:/a:redhat:enterprise_linux:8::crb\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-225.el8_8.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\",\"cpe:/o:redhat:enterprise_linux:8::baseos\",\"cpe:/a:redhat:enterprise_linux:8::crb\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-189.6.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhel_eus:8.6::baseos\",\"cpe:/a:redhat:rhel_eus:8.6::appstream\",\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\",\"cpe:/a:redhat:rhel_eus:8.6::crb\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.34-60.el9_2.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.34-60.el9_2.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Extended Update Support\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.34-28.el9_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.0::appstream\",\"cpe:/o:redhat:rhel_eus:9.0::baseos\",\"cpe:/a:redhat:rhel_eus:9.0::crb\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-189.6.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhel_eus:8.6::baseos\",\"cpe:/a:redhat:rhel_eus:8.6::appstream\",\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\",\"cpe:/a:redhat:rhel_eus:8.6::crb\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-release-virtualization-host\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:4.5.3-10.el8ev\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-virtualization-host\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:4.5.3-202312060823_8.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-glibc\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "For customers who cannot update immediately and do not have Secure Boot feature enabled, the issue can be mitigated using the provided SystemTap script with the following steps. When enabled, any setuid program invoked with GLIBC_TUNABLES in the environment will be terminated immediately. To invoke the setuid program, users will then have to unset or clear the GLIBC_TUNABLES envvar, e.g. `GLIBC_TUNABLES= sudo` . \n\nNote that these mitigation steps will need to be repeated if the system is rebooted.\n\n1) Install required systemtap packages and dependencies as per - https://access.redhat.com/solutions/5441\n\n\n2) Create the following systemtap script, and name it stap_block_suid_tunables.stp:\n ~~~\nfunction has_tunable_string:long()\n{\n name = \"GLIBC_TUNABLES\"\n\n mm = @task(task_current())->mm;\n if (mm)\n {\n env_start = @mm(mm)->env_start;\n env_end = @mm(mm)->env_end;\n\n if (env_start != 0 && env_end != 0)\n while (env_end > env_start)\n {\n cur = user_string(env_start, \"\");\n env_name = tokenize(cur, \"=\");\n \n if (env_name == name && tokenize(\"\", \"\") != \"\")\n return 1;\n env_start += strlen (cur) + 1\n }\n }\n\n return 0;\n}\n\nprobe process(\"/lib*/ld*.so*\").function(\"__tunables_init\")\n{\n atsecure = 0;\n /* Skip processing if we can't read __libc_enable_secure, e.g. core dump\n handler (systemd-cgroups-agent and systemd-coredump). */\n try { atsecure = @var(\"__libc_enable_secure\"); }\n catch { printk (4, sprintf (\"CVE-2023-4911: Skipped check: %s (%d)\", execname(), pid())); }\n if (atsecure && has_tunable_string ())\n raise (9);\n}\n~~~\n\n3) Load the systemtap module into the running kernel:\n ~~~\n stap -g -F -m stap_block_suid_tunables stap_block_suid_tunables.stp\n ~~~\n\n4) Ensure the module is loaded:\n ~~~\n lsmod | grep -i stap_block_suid_tunables\nstap_block_suid_tunables 249856 0\n~~~\n\n5) Once the glibc package is updated to the version containing the fix, the systemtap generated kernel module can be removed by running:\n ~~~\n rmmod stap_block_suid_tunables\n ~~~\n\nIf Secure Boot is enabled on a system, the SystemTap module must be signed. An external compiling server can be used to sign the generated kernel module with a key enrolled into the kernel's keyring or starting with SystemTap 4.7 you can sign a module without a compile server. See further information here - https://www.redhat.com/sysadmin/secure-boot-systemtap", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-122\",\"description\":\"Heap-based Buffer Overflow\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-4911:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "sourcePath": "retained:/originalText", "text": "GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-4911:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "sourcePath": "details.cve-detail:#cve-2023-4911", "text": "SSA-082556\n\nVulnerability CVE-2023-4911\n\nA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-122: Heap-based Buffer Overflow", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2023-4911", "relatedCves": [ "CVE-2023-4911" ], "scopeNote": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourcePath": "details.cve-detail:#cve-2023-4911", "text": "SSA-794697\n\nVulnerability CVE-2023-4911\n\nA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nCWE\nCWE-122: Heap-based Buffer Overflow", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2023-4911", "relatedCves": [ "CVE-2023-4911" ], "scopeNote": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-831302.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html", "sourcePath": "details.cve-detail:#cve-2023-4911", "text": "SSA-831302\n\nVulnerability CVE-2023-4911\n\nA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nCVSS v3.1 Base Score\n7.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\n\nCWE\nCWE-121: Stack-based Buffer Overflow", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2023-4911", "relatedCves": [ "CVE-2023-4911" ], "scopeNote": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" } ], "limits": { "completeness": "bounded", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。 Siemensの複数CVE告知は当該CVEの個別節だけを取得しています。機種別の対象・対策表の対応は未確定のため省略しています。", "excludedLinkedSources": [], "scopedLinkedSources": [ { "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "sourcePath": "details.cve-detail:#cve-2023-4911", "note": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" }, { "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourcePath": "details.cve-detail:#cve-2023-4911", "note": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" }, { "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html", "sourcePath": "details.cve-detail:#cve-2023-4911", "note": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" } ] }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "modifiedAt": "2023-11-21T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "title": "SSA-082556", "relatedCves": [ "CVE-2023-4911" ] }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "title": "SSA-794697", "relatedCves": [ "CVE-2023-4911" ] }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html", "title": "SSA-831302", "relatedCves": [ "CVE-2023-4911" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "title": "SSA-082556", "relatedCves": [ "CVE-2023-4911" ], "truncated": false }, { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "title": "SSA-794697", "relatedCves": [ "CVE-2023-4911" ], "truncated": false }, { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html", "title": "SSA-831302", "relatedCves": [ "CVE-2023-4911" ], "truncated": false } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-14T21:45:37.956Z", "fetchedAt": "2026-10-24T06:22:42.651Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-11-21T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "glibc / Red Hat Enterprise Linux 8 / Red Hat Enterprise Linux 8.6 Extended Update Support / Red Hat Enterprise Linux 9 / Red Hat Enterprise Linux 9.0 Extended Update Support / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 / Red Hat Enterpriに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:22:42.651Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "85cf404f9c45e92f8477498a4c92b22828a291b58cea447b4836ed3efc348b12", "sourceModifiedAt": "2026-10-14T21:45:37.956Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "GNU C Library の動的ローダ ld.so が GLIBC_TUNABLES 環境変数を処理する際にバッファオーバーフローが発見されました。この脆弱性により、ローカルの攻撃者が SUID 権限で実行されるバイナリを起動する際に細工した GLIBC_TUNABLES 環境変数を使用して、特権が昇格したコードを実行できる可能性があります。", "risk": "攻撃者は特権が昇格したコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ローカルの攻撃者であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "GLIBC_TUNABLES 環境変数を任意に設定できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "SUID 権限を持つバイナリを起動できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：glibc。影響ありとして記載：2.34以上、2.39未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Red Hat / Red Hat Enterprise Linux 8。影響なしとして記載：0:2.28-225.el8_8.6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Red Hat / Red Hat Enterprise Linux 8。影響なしとして記載：0:2.28-225.el8_8.6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support。影響なしとして記載：0:2.28-189.6.el8_6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Red Hat / Red Hat Enterprise Linux 9。影響なしとして記載：0:2.34-60.el9_2.7以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Red Hat / Red Hat Enterprise Linux 9。影響なしとして記載：0:2.34-60.el9_2.7以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support。影響なしとして記載：0:2.34-28.el9_0.4以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8。影響なしとして記載：0:2.28-189.6.el8_6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8。影響なしとして記載：0:4.5.3-10.el8ev以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8。影響なしとして記載：0:4.5.3-202312060823_8.6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E12" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911" ], "evidenceIds": [ "E14" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E3" ] }, { "text": "「glibc / Red Hat Enterprise Linux 8 / Red Hat Enterprise Linux 8.6 Extended Update Support / Red Hat Enterprise Linux 9 / Red Hat Enterprise Linux 9.0 Extended Update Support / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 / Red Hat Enterpri」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4911", "https://access.redhat.com/errata/RHSA-2023:5453", "https://access.redhat.com/errata/RHSA-2023:5454", "https://access.redhat.com/errata/RHSA-2023:5455", "https://access.redhat.com/errata/RHSA-2023:5476", "https://access.redhat.com/errata/RHSA-2024:0033", "https://access.redhat.com/security/cve/CVE-2023-4911", "https://bugzilla.redhat.com/show_bug.cgi?id=2238352", "https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt", "https://www.qualys.com/cve-2023-4911/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "https://sourceware.org/git/?p=glibc.git", "https://access.redhat.com/security/cve/cve-2023-4911", "https://www.debian.org/security/2023/dsa-5514", "https://nvd.nist.gov/vuln/detail/CVE-2023-4911" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "Secure Boot が無効で、すぐに更新できない場合は、提供された SystemTap スクリプトを使用して、GLIBC_TUNABLES が環境に含まれる setuid プログラムの実行を直ちに終了させることで緩和できる。手順は SystemTap パッケージのインストール、スクリプト作成、カーネルモジュールのロード、ロード確認、修正パッケージ適用後のモジュール削除、Secure Boot が有効な場合はモジュール署名が必要、という流れである。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E13" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4911", "https://access.redhat.com/errata/RHSA-2023:5453", "https://access.redhat.com/errata/RHSA-2023:5454", "https://access.redhat.com/errata/RHSA-2023:5455", "https://access.redhat.com/errata/RHSA-2023:5476", "https://access.redhat.com/errata/RHSA-2024:0033", "https://access.redhat.com/security/cve/CVE-2023-4911", "https://bugzilla.redhat.com/show_bug.cgi?id=2238352", "https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt", "https://www.qualys.com/cve-2023-4911/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "https://sourceware.org/git/?p=glibc.git", "https://access.redhat.com/security/cve/cve-2023-4911", "https://www.debian.org/security/2023/dsa-5514", "https://nvd.nist.gov/vuln/detail/CVE-2023-4911" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4911", "label": "CVE公式レコード" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5453", "label": "RHSA-2023:5453" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5454", "label": "RHSA-2023:5454" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5455", "label": "RHSA-2023:5455" }, { "url": "https://access.redhat.com/errata/RHSA-2023:5476", "label": "RHSA-2023:5476" }, { "url": "https://access.redhat.com/errata/RHSA-2024:0033", "label": "RHSA-2024:0033" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-4911", "label": "CVE掲載の参考情報" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238352", "label": "RHBZ#2238352" }, { "url": "https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt", "label": "CVE掲載の参考情報" }, { "url": "https://www.qualys.com/cve-2023-4911/", "label": "CVE掲載の参考情報" }, { "url": "https://sourceware.org/git/?p=glibc.git", "label": "CISAが示す関連情報" }, { "url": "https://access.redhat.com/security/cve/cve-2023-4911", "label": "CISAが示す関連情報" }, { "url": "https://www.debian.org/security/2023/dsa-5514", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4911", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/title", "excerpt": "Glibc: buffer overflow in ld.so leading to privilege escalation", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"versions\":[{\"status\":\"affected\",\"version\":\"2.34\",\"lessThan\":\"2.39\",\"versionType\":\"custom\"}],\"packageName\":\"glibc\",\"collectionURL\":\"https://sourceware.org/git/glibc.git\",\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-225.el8_8.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\",\"cpe:/o:redhat:enterprise_linux:8::baseos\",\"cpe:/a:redhat:enterprise_linux:8::crb\"]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-225.el8_8.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\",\"cpe:/o:redhat:enterprise_linux:8::baseos\",\"cpe:/a:redhat:enterprise_linux:8::crb\"]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-189.6.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhel_eus:8.6::baseos\",\"cpe:/a:redhat:rhel_eus:8.6::appstream\",\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\",\"cpe:/a:redhat:rhel_eus:8.6::crb\"]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.34-60.el9_2.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.34-60.el9_2.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Extended Update Support\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.34-28.el9_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.0::appstream\",\"cpe:/o:redhat:rhel_eus:9.0::baseos\",\"cpe:/a:redhat:rhel_eus:9.0::crb\"]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"glibc\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:2.28-189.6.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhel_eus:8.6::baseos\",\"cpe:/a:redhat:rhel_eus:8.6::appstream\",\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\",\"cpe:/a:redhat:rhel_eus:8.6::crb\"]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-release-virtualization-host\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:4.5.3-10.el8ev\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\"]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Virtualization 4 for Red Hat Enterprise Linux 8\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-virtualization-host\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0:4.5.3-202312060823_8.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}],\"cpes\":[\"cpe:/o:redhat:rhev_hypervisor:4.4::el8\"]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "For customers who cannot update immediately and do not have Secure Boot feature enabled, the issue can be mitigated using the provided SystemTap script with the following steps. When enabled, any setuid program invoked with GLIBC_TUNABLES in the environment will be terminated immediately. To invoke the setuid program, users will then have to unset or clear the GLIBC_TUNABLES envvar, e.g. `GLIBC_TUNABLES= sudo` . \n\nNote that these mitigation steps will need to be repeated if the system is rebooted.\n\n1) Install required systemtap packages and dependencies as per - https://access.redhat.com/solutions/5441\n\n\n2) Create the following systemtap script, and name it stap_block_suid_tunables.stp:\n ~~~\nfunction has_tunable_string:long()\n{\n name = \"GLIBC_TUNABLES\"\n\n mm = @task(task_current())->mm;\n if (mm)\n {\n env_start = @mm(mm)->env_start;\n env_end = @mm(mm)->env_end;\n\n if (env_start != 0 && env_end != 0)\n while (env_end > env_start)\n {\n cur = user_string(env_start, \"\");\n env_name = tokenize(cur, \"=\");\n \n if (env_name == name && tokenize(\"\", \"\") != \"\")\n return 1;\n env_start += strlen (cur) + 1\n }\n }\n\n return 0;\n}\n\nprobe process(\"/lib*/ld*.so*\").function(\"__tunables_init\")\n{\n atsecure = 0;\n /* Skip processing if we can't read __libc_enable_secure, e.g. core dump\n handler (systemd-cgroups-agent and systemd-coredump). */\n try { atsecure = @var(\"__libc_enable_secure\"); }\n catch { printk (4, sprintf (\"CVE-2023-4911: Skipped check: %s (%d)\", execname(), pid())); }\n if (atsecure && has_tunable_string ())\n raise (9);\n}\n~~~\n\n3) Load the systemtap module into the running kernel:\n ~~~\n stap -g -F -m stap_block_suid_tunables stap_block_suid_tunables.stp\n ~~~\n\n4) Ensure the module is loaded:\n ~~~\n lsmod | grep -i stap_block_suid_tunables\nstap_block_suid_tunables 249856 0\n~~~\n\n5) Once the glibc package is updated to the version containing the fix, the systemtap generated kernel module can be removed by running:\n ~~~\n rmmod stap_block_suid_tunables\n ~~~\n\nIf Secure Boot is enabled on a system, the SystemTap module must be signed. An external compiling server can be used to sign the generated kernel module with a key enrolled into the kernel's keyring or starting with SystemTap 4.7 you can sign a module without a compile server. See further information here - https://www.redhat.com/sysadmin/secure-boot-systemtap", "language": "en", "representation": "source_excerpt" }, { "id": "E14", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4911", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-4911\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-4911（glibc / Red Hat Enterprise Linux 8 / Red Hat Enterprise Linux 8.6 Extended Update Support / Red Hat Enterprise Linux 9 / Red Hat Enterprise Linux 9.0 Extended Update Support / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 / Red Hat Enterpri）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルの攻撃者であること。\n・GLIBC_TUNABLES 環境変数を任意に設定できること。\n・SUID 権限を持つバイナリを起動できること。\n・公式の対象表：glibc。影響ありとして記載：2.34以上、2.39未満。\n・公式の対象表：Red Hat / Red Hat Enterprise Linux 8。影響なしとして記載：0:2.28-225.el8_8.6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Enterprise Linux 8。影響なしとして記載：0:2.28-225.el8_8.6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support。影響なしとして記載：0:2.28-189.6.el8_6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Enterprise Linux 9。影響なしとして記載：0:2.34-60.el9_2.7以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Enterprise Linux 9。影響なしとして記載：0:2.34-60.el9_2.7以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support。影響なしとして記載：0:2.34-28.el9_0.4以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8。影響なしとして記載：0:2.28-189.6.el8_6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8。影響なしとして記載：0:4.5.3-10.el8ev以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8。影響なしとして記載：0:4.5.3-202312060823_8.6以上（原資料の上限表記は「*」）。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-4911", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:22:42.651Z", "lastSuccess": "2026-10-24T06:22:42.651Z", "sourceCheckedAt": "2026-10-24T06:22:42.651Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2020-2551", "aliases": [], "title": "WebLogic Server：脆弱性情報", "summary": "Oracle Fusion Middleware の WebLogic Server（WLS Core Components）に脆弱性があり、バージョン 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0 が影響を受けます。ネットワーク経由で IIOP にアクセスできる認証されていない攻撃者が容易に悪用でき、WebLogic Server を乗っ取られる可能性があります。", "risk": "攻撃が成功すると、Oracle WebLogic Server が攻撃者に乗っ取られ、機密性・完全性・可用性が重大に損なわれます。", "product": "WebLogic Server", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.0", "cvssSource": "oracle", "cvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "WebLogic Server", "range": "10.3.6.0.0" }, { "product": "WebLogic Server", "range": "12.1.3.0.0" }, { "product": "WebLogic Server", "range": "12.2.1.3.0" }, { "product": "WebLogic Server", "range": "12.2.1.4.0" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2020-2551」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "label": "CVE：oracle" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-2551", "label": "CVE公式レコード" }, { "url": "https://www.oracle.com/security-alerts/cpujan2020.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2551", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2020-01-15T16:34:00.000Z", "modifiedAt": "2026-01-12T21:12:03.126Z", "fetchedAt": "2026-10-24T05:23:42.138Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "WebLogic Server", "vendor": "Oracle Corporation", "versions": [ { "status": "affected", "version": "10.3.6.0.0" }, { "status": "affected", "version": "12.1.3.0.0" }, { "status": "affected", "version": "12.2.1.3.0" }, { "status": "affected", "version": "12.2.1.4.0" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2020-2551", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "fetchedAt": "2026-10-24T05:23:42.138Z", "publishedAt": "2020-01-15T16:34:00.000Z", "modifiedAt": "2026-01-12T21:12:03.126Z", "state": "published", "provider": "oracle", "title": "", "descriptions": [ { "lang": "en", "value": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Oracle Corporation", "product": "WebLogic Server", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.3.6.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "12.1.3.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "12.2.1.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "12.2.1.4.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "oracle", "sourcePath": "/containers/cna/metrics/0/cvssV3_0" } ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpujan2020.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-2551", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"WebLogic Server\",\"vendor\":\"Oracle Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"10.3.6.0.0\"},{\"status\":\"affected\",\"version\":\"12.1.3.0.0\"},{\"status\":\"affected\",\"version\":\"12.2.1.3.0\"},{\"status\":\"affected\",\"version\":\"12.2.1.4.0\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_0", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2020-2551:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "sourcePath": "retained:/originalText", "text": "Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2020-2551:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "modifiedAt": "2023-11-16T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-01-12T21:12:03.126Z", "fetchedAt": "2026-10-24T05:23:42.138Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-11-16T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "WebLogic Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:42.138Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9c6be4bbc3ca31be0f0c35a6d66c9b7e091e9672c14894262f2bcf50c3456078", "sourceModifiedAt": "2026-01-12T21:12:03.126Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Oracle Fusion Middleware の WebLogic Server（WLS Core Components）に脆弱性があり、バージョン 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0 が影響を受けます。ネットワーク経由で IIOP にアクセスできる認証されていない攻撃者が容易に悪用でき、WebLogic Server を乗っ取られる可能性があります。", "risk": "攻撃が成功すると、Oracle WebLogic Server が攻撃者に乗っ取られ、機密性・完全性・可用性が重大に損なわれます。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "認証されていない攻撃者がネットワーク上で IIOP にアクセスできることが前提条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551" ], "evidenceIds": [ "E1", "E2", "E3" ] }, { "text": "公式の対象表：Oracle Corporation / WebLogic Server。影響ありとして記載：10.3.6.0.0。影響ありとして記載：12.1.3.0.0。影響ありとして記載：12.2.1.3.0。影響ありとして記載：12.2.1.4.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json" ], "evidenceIds": [ "E4" ] }, { "text": "「WebLogic Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-2551", "https://www.oracle.com/security-alerts/cpujan2020.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "https://nvd.nist.gov/vuln/detail/CVE-2020-2551" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2020-2551」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2020-2551", "https://www.oracle.com/security-alerts/cpujan2020.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "https://nvd.nist.gov/vuln/detail/CVE-2020-2551" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-2551", "https://www.oracle.com/security-alerts/cpujan2020.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "https://nvd.nist.gov/vuln/detail/CVE-2020-2551" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2020-2551", "https://www.oracle.com/security-alerts/cpujan2020.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "https://nvd.nist.gov/vuln/detail/CVE-2020-2551" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-2551", "https://www.oracle.com/security-alerts/cpujan2020.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "https://nvd.nist.gov/vuln/detail/CVE-2020-2551" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "label": "CVE：oracle" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-2551", "label": "CVE公式レコード" }, { "url": "https://www.oracle.com/security-alerts/cpujan2020.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2551", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"description\":\"Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.\",\"lang\":\"en\",\"type\":\"text\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "sourceField": "retained:/originalText", "excerpt": "Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/2xxx/CVE-2020-2551.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"WebLogic Server\",\"vendor\":\"Oracle Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"10.3.6.0.0\"},{\"status\":\"affected\",\"version\":\"12.1.3.0.0\"},{\"status\":\"affected\",\"version\":\"12.2.1.3.0\"},{\"status\":\"affected\",\"version\":\"12.2.1.4.0\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-2551", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2020-2551\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2020-2551（WebLogic Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていない攻撃者がネットワーク上で IIOP にアクセスできることが前提条件です。\n・公式の対象表：Oracle Corporation / WebLogic Server。影響ありとして記載：10.3.6.0.0。影響ありとして記載：12.1.3.0.0。影響ありとして記載：12.2.1.3.0。影響ありとして記載：12.2.1.4.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-2551", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:42.138Z", "lastSuccess": "2026-10-24T05:23:42.138Z", "sourceCheckedAt": "2026-10-24T05:23:42.138Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-1671", "aliases": [], "title": "Sophos Web Appliance：コード実行", "summary": "Sophos Web Appliance のバージョン 4.3.10.4 未満において、認証前の warn‑proceed ハンドラでコマンドインジェクションが可能で、任意のコードを実行できる脆弱性が存在します。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で任意のコードが実行され、機器を制御される可能性があります。", "product": "Sophos Web Appliance", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "Sophos", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Sophos Web Appliance", "range": ">= unspecified / < 4.3.10.4" } ], "fixed": [], "steps": [ "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-1671」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "label": "CVE：Sophos" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-1671", "label": "CVE公式レコード" }, { "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "label": "CISAが示す関連情報" }, { "url": "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1671", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-04-04T00:00:00.000Z", "modifiedAt": "2025-10-21T23:15:21.081Z", "fetchedAt": "2026-10-24T05:23:43.838Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Sophos", "product": "Sophos Web Appliance", "versions": [ { "version": "unspecified", "lessThan": "4.3.10.4", "status": "affected", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-1671", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "fetchedAt": "2026-10-24T05:23:43.838Z", "publishedAt": "2023-04-04T00:00:00.000Z", "modifiedAt": "2025-10-21T23:15:21.081Z", "state": "published", "provider": "Sophos", "title": "", "descriptions": [ { "lang": "en", "value": "A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Sophos", "product": "Sophos Web Appliance", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "4.3.10.4", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "Sophos", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-1671", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Sophos\",\"product\":\"Sophos Web Appliance\",\"versions\":[{\"version\":\"unspecified\",\"lessThan\":\"4.3.10.4\",\"status\":\"affected\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-1671:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "sourcePath": "retained:/originalText", "text": "Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-1671:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "modifiedAt": "2023-11-16T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:21.081Z", "fetchedAt": "2026-10-24T05:23:43.838Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-11-16T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Sophos Web Applianceにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:23:43.838Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3feeace63fd4722dbb22576c0b6841a8d3a595047208c7e6904b0f6233f0e334", "sourceModifiedAt": "2025-10-21T23:15:21.081Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Sophos Web Appliance のバージョン 4.3.10.4 未満において、認証前の warn‑proceed ハンドラでコマンドインジェクションが可能で、任意のコードを実行できる脆弱性が存在します。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で任意のコードが実行され、機器を制御される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "Sophos Web Appliance のバージョンが 4.3.10.4 未満で、認証前に warn‑proceed ハンドラにリクエストを送信できる環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "公式の対象表：Sophos / Sophos Web Appliance。影響ありとして記載：4.3.10.4未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Sophos Web Appliance」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-1671", "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "https://nvd.nist.gov/vuln/detail/CVE-2023-1671" ] } ], "actions": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-1671」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-1671", "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "https://nvd.nist.gov/vuln/detail/CVE-2023-1671" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-1671", "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "https://nvd.nist.gov/vuln/detail/CVE-2023-1671" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-1671", "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "https://nvd.nist.gov/vuln/detail/CVE-2023-1671" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-1671", "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "https://nvd.nist.gov/vuln/detail/CVE-2023-1671" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "label": "CVE：Sophos" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-1671", "label": "CVE公式レコード" }, { "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce", "label": "CISAが示す関連情報" }, { "url": "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1671", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "sourceField": "retained:/originalText", "excerpt": "Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1671.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Sophos\",\"product\":\"Sophos Web Appliance\",\"versions\":[{\"version\":\"unspecified\",\"lessThan\":\"4.3.10.4\",\"status\":\"affected\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-1671", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-1671\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-1671（Sophos Web Appliance）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Sophos Web Appliance のバージョンが 4.3.10.4 未満で、認証前に warn‑proceed ハンドラにリクエストを送信できる環境。\n・公式の対象表：Sophos / Sophos Web Appliance。影響ありとして記載：4.3.10.4未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-1671", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:23:43.838Z", "lastSuccess": "2026-10-24T05:23:43.838Z", "sourceCheckedAt": "2026-10-24T05:23:43.838Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } } ], "total": 2287, "limit": 20, "offset": 1220, "filters": { "product": "all", "type": "all", "q": "", "page": 62 }, "pagination": { "page": 62, "pageSize": 20, "totalPages": 115 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-25T04:17:51.643Z", "lastAttempt": "2026-10-25T04:17:51.643Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-25T03:19:58.143Z", "lastAttempt": "2026-10-25T04:17:51.643Z", "error": "GitHub API取得上限に到達 (2026-10-25T04:19:24.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-25T04:17:51.643Z", "lastAttempt": "2026-10-25T04:17:51.643Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-24T22:17:49.743Z", "lastAttempt": "2026-10-25T04:17:51.643Z", "error": null, "recordCount": 10, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-24T16:02:49.075Z 〜 2026-10-24T22:17:49.743Z、全製品の変更 3192/3192件まで確認、対象10件反映。", "cursor": null, "freshness": "stale", "stale": true }, { "name": "CVE", "status": "error", "lastSuccess": "2026-10-25T03:19:58.143Z", "lastAttempt": "2026-10-25T04:17:51.643Z", "error": "HTTP 404", "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }