CVE-2023-43520

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435217.8Memory corruption when multiple listeners are being registered with the same file descriptor.CVE-2023-435227.5Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.CVE-2023-435237.5Transient DOS while processing 11AZ RTT management action frame received through OTA.CVE-2023-435247.8Memory corruption when the bandpass filter order received from AHAL is not within the expected range.CVE-2023-435257.8Memory corruption while copying the sound model data from user to kernel buffer during sound model register.CVE-2023-435267.8Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.CVE-2023-435275.5Information disclosure while parsing dts header atom in Video.CVE-2023-435285.5Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expeCVE-2023-435297.5Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.CVE-2023-43538.8Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via aCVE-2023-435307.8Memory corruption in HLOS while checking for the storage type.CVE-2023-435317.8Memory corruption while verifying the serialized header when the key pairs are generated.
CVE-2023-43520: Critical severity, CVSS 9.8 | Vulnix