7.8

CVE-2023-43514

Use After Free in DSP Services

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ar8035 Firmware Version -
   Qualcomm ≫ Ar8035 Version -
Qualcomm ≫ Fastconnect 6200 Firmware Version -
   Qualcomm ≫ Fastconnect 6200 Version -
Qualcomm ≫ Fastconnect 6700 Firmware Version -
   Qualcomm ≫ Fastconnect 6700 Version -
Qualcomm ≫ Fastconnect 6900 Firmware Version -
   Qualcomm ≫ Fastconnect 6900 Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
   Qualcomm ≫ Fastconnect 7800 Version -
Qualcomm ≫ Qam8255p Firmware Version -
   Qualcomm ≫ Qam8255p Version -
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p Version -
Qualcomm ≫ Qam8650p Firmware Version -
   Qualcomm ≫ Qam8650p Version -
Qualcomm ≫ Qam8775p Firmware Version -
   Qualcomm ≫ Qam8775p Version -
Qualcomm ≫ Qca6391 Firmware Version -
   Qualcomm ≫ Qca6391 Version -
Qualcomm ≫ Qca6574 Firmware Version -
   Qualcomm ≫ Qca6574 Version -
Qualcomm ≫ Qca6574a Firmware Version -
   Qualcomm ≫ Qca6574a Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595 Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq Version -
Qualcomm ≫ Qca6797aq Firmware Version -
   Qualcomm ≫ Qca6797aq Version -
Qualcomm ≫ Qca8081 Firmware Version -
   Qualcomm ≫ Qca8081 Version -
Qualcomm ≫ Qca8337 Firmware Version -
   Qualcomm ≫ Qca8337 Version -
Qualcomm ≫ Qcc710 Firmware Version -
   Qualcomm ≫ Qcc710 Version -
Qualcomm ≫ Qcm4325 Firmware Version -
   Qualcomm ≫ Qcm4325 Version -
Qualcomm ≫ Qcm6490 Firmware Version -
   Qualcomm ≫ Qcm6490 Version -
Qualcomm ≫ Qcm8550 Firmware Version -
   Qualcomm ≫ Qcm8550 Version -
Qualcomm ≫ Qcn6224 Firmware Version -
   Qualcomm ≫ Qcn6224 Version -
Qualcomm ≫ Qcn6274 Firmware Version -
   Qualcomm ≫ Qcn6274 Version -
Qualcomm ≫ Qcs6490 Firmware Version -
   Qualcomm ≫ Qcs6490 Version -
Qualcomm ≫ Qcs7230 Firmware Version -
   Qualcomm ≫ Qcs7230 Version -
Qualcomm ≫ Qcs8250 Firmware Version -
   Qualcomm ≫ Qcs8250 Version -
Qualcomm ≫ Qcs8550 Firmware Version -
   Qualcomm ≫ Qcs8550 Version -
Qualcomm ≫ Qdu1000 Firmware Version -
   Qualcomm ≫ Qdu1000 Version -
Qualcomm ≫ Qdu1010 Firmware Version -
   Qualcomm ≫ Qdu1010 Version -
Qualcomm ≫ Qdu1110 Firmware Version -
   Qualcomm ≫ Qdu1110 Version -
Qualcomm ≫ Qdu1210 Firmware Version -
   Qualcomm ≫ Qdu1210 Version -
Qualcomm ≫ Qdx1010 Firmware Version -
   Qualcomm ≫ Qdx1010 Version -
Qualcomm ≫ Qdx1011 Firmware Version -
   Qualcomm ≫ Qdx1011 Version -
Qualcomm ≫ Qfw7114 Firmware Version -
   Qualcomm ≫ Qfw7114 Version -
Qualcomm ≫ Qfw7124 Firmware Version -
   Qualcomm ≫ Qfw7124 Version -
Qualcomm ≫ Qrb5165n Firmware Version -
   Qualcomm ≫ Qrb5165n Version -
Qualcomm ≫ Qru1032 Firmware Version -
   Qualcomm ≫ Qru1032 Version -
Qualcomm ≫ Qru1052 Firmware Version -
   Qualcomm ≫ Qru1052 Version -
Qualcomm ≫ Qru1062 Firmware Version -
   Qualcomm ≫ Qru1062 Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p Version -
Qualcomm ≫ Sa8195p Firmware Version -
   Qualcomm ≫ Sa8195p Version -
Qualcomm ≫ Sa8255p Firmware Version -
   Qualcomm ≫ Sa8255p Version -
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p Version -
Qualcomm ≫ Sg4150p Firmware Version -
   Qualcomm ≫ Sg4150p Version -
Qualcomm ≫ Sg8275p Firmware Version -
   Qualcomm ≫ Sg8275p Version -
Qualcomm ≫ Sm8550p Firmware Version -
   Qualcomm ≫ Sm8550p Version -
Qualcomm ≫ Sw5100 Firmware Version -
   Qualcomm ≫ Sw5100 Version -
Qualcomm ≫ Sw5100p Firmware Version -
   Qualcomm ≫ Sw5100p Version -
Qualcomm ≫ Wcd9340 Firmware Version -
   Qualcomm ≫ Wcd9340 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9375 Firmware Version -
   Qualcomm ≫ Wcd9375 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcd9390 Firmware Version -
   Qualcomm ≫ Wcd9390 Version -
Qualcomm ≫ Wcd9395 Firmware Version -
   Qualcomm ≫ Wcd9395 Version -
Qualcomm ≫ Wcn3950 Firmware Version -
   Qualcomm ≫ Wcn3950 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Qualcomm ≫ Wsa8840 Firmware Version -
   Qualcomm ≫ Wsa8840 Version -
Qualcomm ≫ Wsa8845 Firmware Version -
   Qualcomm ≫ Wsa8845 Version -
Qualcomm ≫ Wsa8845h Firmware Version -
   Qualcomm ≫ Wsa8845h Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.016
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
Patch
Vendor Advisory