CVE-2023-21636

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption due to improper validation of array index in Linux while updating adn record.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; QCA6390; QCA6391; QCA6420; QCA6426; QCA6430; QCA6436; QCA6574A; QCA6574AU; QCA6595AU; QCA6696; QCC5100; SA515M; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P

References

Timeline

Published
Sep 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216377.8Memory corruption in Linux while calling system configuration APIs.CVE-2023-216387.8Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.CVE-2023-216397.8Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.CVE-2023-21645.4An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.CVE-2023-216407.8Memory corruption in Linux when the file upload API is called with parameters having large buffer.CVE-2023-216417.8An app with non-privileged access can change global system brightness and cause undesired system behavior.CVE-2023-216427.8Memory corruption in HAB Memory management due to broad system privileges via physical address.CVE-2023-216437.8Memory corruption due to untrusted pointer dereference in automotive during system call.CVE-2023-216447.8Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.CVE-2023-216467.5Transient DOS in Modem while processing invalid System Information Block 1.CVE-2023-216476.5Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.CVE-2023-216487.8Memory corruption in RIL while trying to send apdu packet.
CVE-2023-21636: High severity, CVSS 7.8 | Vulnix