CVE-2023-21647

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonQCA6390; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6595AU; QCA6696; QCC5100; QCN9074; QCS410; QCS610; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; SD 8 Gen1 5G; SD865 5G

References

Timeline

Published
Aug 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216487.8Memory corruption in RIL while trying to send apdu packet.CVE-2023-216497.8Memory corruption in WLAN while running doDriverCmd for an unspecific command.CVE-2023-216507.8Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.CVE-2023-216517.8Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.CVE-2023-216527.1Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.CVE-2023-216537.5Transient DOS in Modem while processing RRC reconfiguration message.CVE-2023-216547.8Memory corruption in Audio during playback session with audio effects enabled.CVE-2023-216557.8Memory corruption in Audio while validating and mapping metadata.CVE-2023-216567.8Memory corruption in WLAN HOST while receiving an WMI event from firmware.CVE-2023-216577.8Memoru corruption in Audio when ADSP sends input during record use case.CVE-2023-216587.5Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.CVE-2023-216597.5Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2023-21647: Medium severity, CVSS 6.5 | Vulnix