CVE-2023-21656

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in WLAN HOST while receiving an WMI event from firmware.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QCA6175A; QCA6310; QCA6320; QCA6391; QCA6426; QCA6436; QCA6554A

References

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216577.8Memoru corruption in Audio when ADSP sends input during record use case.CVE-2023-216587.5Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.CVE-2023-216597.5Transient DOS in WLAN Firmware while processing frames with missing header fields.CVE-2023-21665.5A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in CVE-2023-216607.5Transient DOS in WLAN Firmware while parsing FT Information Elements.CVE-2023-216617.5Transient DOS while parsing WLAN beacon or probe-response frame.CVE-2023-216627.8Memory corruption in Core Platform while printing the response buffer in log.CVE-2023-216637.8Memory Corruption while accessing metadata in Display.CVE-2023-216647.8Memory Corruption in Core Platform while printing the response buffer in log.CVE-2023-216657.8Memory corruption in Graphics while importing a file.CVE-2023-216667.8Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.CVE-2023-216676.5Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
CVE-2023-21656: High severity, CVSS 7.8 | Vulnix