CVE-2023-22387

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	315 5G IoT Modem; APQ8017; AQT1000; AR8031; AR8035; AR9380; C-V2X 9150; CSR8811; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Home Hub 100 Platform; Immersive Home 214 Platform; Immersive Home 216 Platform

References

https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletinPatch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletinPatch, Vendor Advisory

Timeline

Published: Jul 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-223889.8Memory Corruption in Multi-mode Call Processor while processing bit mask API.CVE-2023-223896.5Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via CVE-2023-22396.5Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.CVE-2023-223906.5Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to p CVE-2023-223917.5A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticate CVE-2023-223926.5A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows CVE-2023-223937.5An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evol CVE-2023-223947.5An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Se CVE-2023-223956.5A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adj CVE-2023-223967.5An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unaut CVE-2023-223976.1An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine (PFE) on Juniper N CVE-2023-223985.5An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allo