CVE-2023-21634

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6800; FastConnect 6900; QCA6310; QCA6320; QCA6391; QCA6420; QCA6426; QCA6430; QCA6436; QCA6574AU; QCA6595AU; QCA6696; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P

References

Timeline

Published
Dec 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216357.8Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.CVE-2023-216367.8Memory Corruption due to improper validation of array index in Linux while updating adn record.CVE-2023-216377.8Memory corruption in Linux while calling system configuration APIs.CVE-2023-216387.8Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.CVE-2023-216397.8Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.CVE-2023-21645.4An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.CVE-2023-216407.8Memory corruption in Linux when the file upload API is called with parameters having large buffer.CVE-2023-216417.8An app with non-privileged access can change global system brightness and cause undesired system behavior.CVE-2023-216427.8Memory corruption in HAB Memory management due to broad system privileges via physical address.CVE-2023-216437.8Memory corruption due to untrusted pointer dereference in automotive during system call.CVE-2023-216447.8Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.CVE-2023-216467.5Transient DOS in Modem while processing invalid System Information Block 1.