CVE-2023-21649

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8096AU; AQT1000; MDM9628; MDM9650; QCA6390; QCA6391; QCA6420; QCA6421; QCA6426; QCA6430; QCA6431; QCA6436; QCA6554A; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595
qualcommapq8096au_firmware<= *
qualcommaqt1000_firmware<= *
qualcommmdm9628_firmware<= *
qualcommmdm9650_firmware<= *
qualcommqca6390_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6421_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6430_firmware<= *
qualcommqca6431_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6554a_firmware<= *
qualcommqca6564a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca8337_firmware<= *
qualcommqcc5100_firmware<= *
qualcommqcn9074_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs610_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsd480_firmware<= *
qualcommsd695_firmware<= *
qualcommsd855_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsd870_firmware<= *
qualcommsda429w_firmware<= *
qualcommsdx55_firmware<= *
qualcommsdx55m_firmware<= *
qualcommsdxr2_5g_firmware<= *
qualcommsm4375_firmware<= *
qualcommsw5100_firmware<= *
qualcommsw5100p_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9375_firmware<= *

References

Timeline

Published
Aug 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216507.8Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.CVE-2023-216517.8Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.CVE-2023-216527.1Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.CVE-2023-216537.5Transient DOS in Modem while processing RRC reconfiguration message.CVE-2023-216547.8Memory corruption in Audio during playback session with audio effects enabled.CVE-2023-216557.8Memory corruption in Audio while validating and mapping metadata.CVE-2023-216567.8Memory corruption in WLAN HOST while receiving an WMI event from firmware.CVE-2023-216577.8Memoru corruption in Audio when ADSP sends input during record use case.CVE-2023-216587.5Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.CVE-2023-216597.5Transient DOS in WLAN Firmware while processing frames with missing header fields.CVE-2023-21665.5A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in CVE-2023-216607.5Transient DOS in WLAN Firmware while parsing FT Information Elements.
CVE-2023-21649: High severity, CVSS 7.8 | Vulnix