CVE-2023-43518

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption in video while parsing invalid mp2 clip.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8775P; QCA6310; QCA6320; QCA6391; QCA6420; QCA6430; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6696
qualcommaqt1000_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqca6310_firmware<= *
qualcommqca6320_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6430_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqcm2290_firmware<= *
qualcommqcm4290_firmware<= *
qualcommqcm4325_firmware<= *
qualcommqcm4490_firmware<= *
qualcommqcm6125_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcm8550_firmware<= *
qualcommqcn7606_firmware<= *
qualcommqcs2290_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs4290_firmware<= *
qualcommqcs4490_firmware<= *
qualcommqcs610_firmware<= *
qualcommqcs6125_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqcs7230_firmware<= *
qualcommqcs8250_firmware<= *
qualcommqcs8550_firmware<= *
qualcommqualcomm_215_mobile_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc1_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc5_platform_firmware<= *
qualcommsa4150p_firmware<= *
qualcommsa4155p_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *

References

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435199.8Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.CVE-2023-43528.8Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-435209.8Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.CVE-2023-435217.8Memory corruption when multiple listeners are being registered with the same file descriptor.CVE-2023-435227.5Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.CVE-2023-435237.5Transient DOS while processing 11AZ RTT management action frame received through OTA.CVE-2023-435247.8Memory corruption when the bandpass filter order received from AHAL is not within the expected range.CVE-2023-435257.8Memory corruption while copying the sound model data from user to kernel buffer during sound model register.CVE-2023-435267.8Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.CVE-2023-435275.5Information disclosure while parsing dts header atom in Video.CVE-2023-435285.5Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expeCVE-2023-435297.5Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
CVE-2023-43518: Critical severity, CVSS 9.8 | Vulnix