CVE-2023-21643

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption due to untrusted pointer dereference in automotive during system call.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8064AU; APQ8096AU; MSM8996AU; QAM8295P; QCA6564A; QCA6564AU; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6696; SA6145P; SA6150P; SA6155; SA6155P; SA8145P; SA8150P; SA8155; SA8155P

References

Timeline

Published
Aug 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216447.8Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.CVE-2023-216467.5Transient DOS in Modem while processing invalid System Information Block 1.CVE-2023-216476.5Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.CVE-2023-216487.8Memory corruption in RIL while trying to send apdu packet.CVE-2023-216497.8Memory corruption in WLAN while running doDriverCmd for an unspecific command.CVE-2023-216507.8Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.CVE-2023-216517.8Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.CVE-2023-216527.1Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.CVE-2023-216537.5Transient DOS in Modem while processing RRC reconfiguration message.CVE-2023-216547.8Memory corruption in Audio during playback session with audio effects enabled.CVE-2023-216557.8Memory corruption in Audio while validating and mapping metadata.CVE-2023-216567.8Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVE-2023-21643: High severity, CVSS 7.8 | Vulnix