CVE-2023-21635

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; CSRB31024; FastConnect 6200; FastConnect 6800; FastConnect 6900; QCA6391; QCA6420; QCA6426; QCA6430; QCA6436; QCA6564; QCA6564AU; QCA6574A; QCA6574AU; QCA6595AU; QCA6696; SA6145P; SA6150P; SA6155P; SA8145P
qualcommaqt1000_firmware-
qualcommcsrb31024_firmware-
qualcommfastconnect_6200_firmware-
qualcommfastconnect_6800_firmware-
qualcommfastconnect_6900_firmware-
qualcommqca6391_firmware-
qualcommqca6420_firmware-
qualcommqca6426_firmware-
qualcommqca6430_firmware-
qualcommqca6436_firmware-
qualcommqca6564_firmware-
qualcommqca6564au_firmware-
qualcommqca6574a_firmware-
qualcommqca6574au_firmware-
qualcommqca6595au_firmware-
qualcommqca6696_firmware-
qualcommsa6145p_firmware-
qualcommsa6150p_firmware-
qualcommsa6155p_firmware-
qualcommsa8145p_firmware-
qualcommsa8150p_firmware-
qualcommsa8155p_firmware-
qualcommsa8195p_firmware-
qualcommsd855_firmware-
qualcommsd865_5g_firmware-
qualcommsnapdragon_855_mobile_platform_firmware-
qualcommsnapdragon_865_5g_mobile_platform_firmware-
qualcommsnapdragon_x55_5g_modem-rf_system_firmware-
qualcommsnapdragon_xr2_5g_platform_firmware-
qualcommsnapdragon_auto_4g_modem_firmware-
qualcommsw5100_firmware-
qualcommsw5100p_firmware-
qualcommsxr2130_firmware-
qualcommwcd9341_firmware-
qualcommwcd9380_firmware-
qualcommwcn3610_firmware-
qualcommwcn3660b_firmware-
qualcommwcn3680b_firmware-
qualcommwcn3980_firmware-
qualcommwcn3988_firmware-
qualcommwsa8810_firmware-
qualcommwsa8815_firmware-
qualcommwsa8830_firmware-
qualcommwsa8835_firmware-

References

Timeline

Published
Jul 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216367.8Memory Corruption due to improper validation of array index in Linux while updating adn record.CVE-2023-216377.8Memory corruption in Linux while calling system configuration APIs.CVE-2023-216387.8Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.CVE-2023-216397.8Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.CVE-2023-21645.4An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.CVE-2023-216407.8Memory corruption in Linux when the file upload API is called with parameters having large buffer.CVE-2023-216417.8An app with non-privileged access can change global system brightness and cause undesired system behavior.CVE-2023-216427.8Memory corruption in HAB Memory management due to broad system privileges via physical address.CVE-2023-216437.8Memory corruption due to untrusted pointer dereference in automotive during system call.CVE-2023-216447.8Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.CVE-2023-216467.5Transient DOS in Modem while processing invalid System Information Block 1.CVE-2023-216476.5Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.
CVE-2023-21635: High severity, CVSS 7.8 | Vulnix