CVE-2023-43512

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	QCN7606
qualcomm	qcn7606_firmware	< *

References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletinVendor Advisory

Timeline

Published: Jan 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-435137.8Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values CVE-2023-435147.8Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.CVE-2023-435157.8Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.CVE-2023-435167.8Memory corruption when malformed message payload is received from firmware.CVE-2023-435177.8Memory corruption in Automotive Multimedia due to improper access control in HAB.CVE-2023-435189.8Memory corruption in video while parsing invalid mp2 clip.CVE-2023-435199.8Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.CVE-2023-43528.8Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-435209.8Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.CVE-2023-435217.8Memory corruption when multiple listeners are being registered with the same file descriptor.CVE-2023-435227.5Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.CVE-2023-435237.5Transient DOS while processing 11AZ RTT management action frame received through OTA.