CVE-2023-43540

EPSS 0.1%
Veröffentlicht 04.03.2024 11:15:12
Zuletzt bearbeitet 10.01.2025 17:50:54
Quelle product-security@qualcomm.com
Teams Watchlist Login
Unerledigt Login

Memory corruption while processing the IOCTL FM HCI WRITE request.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Aqt1000 Firmware Version-

Qualcomm ≫ Aqt1000 Version-

Qualcomm ≫ Fastconnect 6200 Firmware Version-

Qualcomm ≫ Fastconnect 6200 Version-

Qualcomm ≫ Fastconnect 6700 Firmware Version-

Qualcomm ≫ Fastconnect 6700 Version-

Qualcomm ≫ Fastconnect 6800 Firmware Version-

Qualcomm ≫ Fastconnect 6800 Version-

Qualcomm ≫ Fastconnect 6900 Firmware Version-

Qualcomm ≫ Fastconnect 6900 Version-

Qualcomm ≫ Fastconnect 7800 Firmware Version-

Qualcomm ≫ Fastconnect 7800 Version-

Qualcomm ≫ Qca6391 Firmware Version-

Qualcomm ≫ Qca6391 Version-

Qualcomm ≫ Qca6420 Firmware Version-

Qualcomm ≫ Qca6420 Version-

Qualcomm ≫ Qca6430 Firmware Version-

Qualcomm ≫ Qca6430 Version-

Qualcomm ≫ Sc8380xp Firmware Version-

Qualcomm ≫ Sc8380xp Version-

Qualcomm ≫ Sm6250 Firmware Version-

Qualcomm ≫ Sm6250 Version-

Qualcomm ≫ Snapdragon 7c Compute Firmware Version-

Qualcomm ≫ Snapdragon 7c Compute Version-

Qualcomm ≫ Snapdragon 7c Gen 2 Compute Firmware Version-

Qualcomm ≫ Snapdragon 7c Gen 2 Compute Version-

Qualcomm ≫ Snapdragon 7c+ Gen 3 Compute Firmware Version-

Qualcomm ≫ Snapdragon 7c+ Gen 3 Compute Version-

Qualcomm ≫ Snapdragon 8c Compute Firmware Version-

Qualcomm ≫ Snapdragon 8c Compute Version-

Qualcomm ≫ Snapdragon 8cx Compute Firmware Version-

Qualcomm ≫ Snapdragon 8cx Compute Version-

Qualcomm ≫ Snapdragon 8cx Gen 2 5g Firmware Version-

Qualcomm ≫ Snapdragon 8cx Gen 2 5g Version-

Qualcomm ≫ Snapdragon 8cx Gen 3 Firmware Version-

Qualcomm ≫ Snapdragon 8cx Gen 3 Version-

Qualcomm ≫ Wcd9340 Firmware Version-

Qualcomm ≫ Wcd9340 Version-

Qualcomm ≫ Wcd9341 Firmware Version-

Qualcomm ≫ Wcd9341 Version-

Qualcomm ≫ Wcd9380 Firmware Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Firmware Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wsa8810 Firmware Version-

Qualcomm ≫ Wsa8810 Version-

Qualcomm ≫ Wsa8815 Firmware Version-

Qualcomm ≫ Wsa8815 Version-

Qualcomm ≫ Wsa8830 Firmware Version-

Qualcomm ≫ Wsa8830 Version-

Qualcomm ≫ Wsa8835 Firmware Version-

Qualcomm ≫ Wsa8835 Version-

Qualcomm ≫ Wsa8840 Firmware Version-

Qualcomm ≫ Wsa8840 Version-

Qualcomm ≫ Wsa8845 Firmware Version-

Qualcomm ≫ Wsa8845 Version-

Qualcomm ≫ Wsa8845h Firmware Version-

Qualcomm ≫ Wsa8845h Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.273

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-43540

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-43540

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-43540

EUVD