CVE-2023-43513

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; APQ8017; AQT1000; AR8031; AR8035; C-V2X 9150; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; FSM20055; FSM20056; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform

References

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435147.8Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.CVE-2023-435157.8Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.CVE-2023-435167.8Memory corruption when malformed message payload is received from firmware.CVE-2023-435177.8Memory corruption in Automotive Multimedia due to improper access control in HAB.CVE-2023-435189.8Memory corruption in video while parsing invalid mp2 clip.CVE-2023-435199.8Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.CVE-2023-43528.8Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-435209.8Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.CVE-2023-435217.8Memory corruption when multiple listeners are being registered with the same file descriptor.CVE-2023-435227.5Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.CVE-2023-435237.5Transient DOS while processing 11AZ RTT management action frame received through OTA.CVE-2023-435247.8Memory corruption when the bandpass filter order received from AHAL is not within the expected range.