CVE-2023-43515

nvd nist

Published: Apr 1, 2024Modified: Jan 13, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

Affected (6)

Products: Qualcomm: Fastconnect 6900 Firmware, Fastconnect 7800 Firmware, Snapdragon 8 Gen 1 Mobile Firmware, Wcd9380 Firmware, Wsa8830 Firmware, Wsa8835 Firmware

Qualcomm

6 products

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Snapdragon 8 Gen 1 Mobile Firmware

Wcd9380 Firmware

Wsa8830 Firmware

Wsa8835 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 6900 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 6900	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8 Gen 1 Mobile Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8 Gen 1 Mobile	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9380 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9380	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8830 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8830	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8835 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8835	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

Source: product-security@qualcomm.com

PatchVendor Advisory

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.