CVE-2023-21624

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Information disclosure in DSP Services while loading dynamic module.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6700; FastConnect 6800; FastConnect 6900; QAM8255P; QCA6310; QCA6320; QCA6391; QCA6426; QCA6436; QCA6574; QCA6574A; QCA6574AU; QCA6595AU; QCA6696; QCA6698AQ; QCA6797AQ; QCS8155; SA6145P; SA6150P; SA6155

References

Timeline

Published
Jul 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216257.5Information disclosure in Network Services due to buffer over-read while the device receives DNS response.CVE-2023-216267.1Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.CVE-2023-216277.8Memory corruption in Trusted Execution Environment while calling service API with invalid address.CVE-2023-216287.8Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.CVE-2023-216296.8Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.CVE-2023-21638.8Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary CVE-2023-216307.8Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.CVE-2023-216319.8Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.CVE-2023-216327.8Memory corruption in Automotive GPU while querying a gsl memory node.CVE-2023-216337.8Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.CVE-2023-216347.8Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.CVE-2023-216357.8Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
CVE-2023-21624: Medium severity, CVSS 5.5 | Vulnix