title: Buffer Over-read in DSP Services
description: Information Disclosure while processing IOCTL request in FastRPC.
affected:
{
defaultStatus: unaffected
platforms: Snapdragon Compute
product: Snapdragon
vendor: Qualcomm, Inc.
versions:
status: affected, version: FastConnect 6700
status: affected, version: FastConnect 6900
status: affected, version: FastConnect 7800
status: affected, version: SC8380XP
status: affected, version: Snapdragon 7c+ Gen 3 Compute
status: affected, version: Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)
status: affected, version: WCD9380
status: affected, version: WCD9385
status: affected, version: WSA8830
status: affected, version: WSA8835
status: affected, version: WSA8840
status: affected, version: WSA8845
status: affected, version: WSA8845H
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL