CVE-2023-43522

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435237.5Transient DOS while processing 11AZ RTT management action frame received through OTA.CVE-2023-435247.8Memory corruption when the bandpass filter order received from AHAL is not within the expected range.CVE-2023-435257.8Memory corruption while copying the sound model data from user to kernel buffer during sound model register.CVE-2023-435267.8Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.CVE-2023-435275.5Information disclosure while parsing dts header atom in Video.CVE-2023-435285.5Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expeCVE-2023-435297.5Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.CVE-2023-43538.8Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via aCVE-2023-435307.8Memory corruption in HLOS while checking for the storage type.CVE-2023-435317.8Memory corruption while verifying the serialized header when the key pairs are generated.CVE-2023-435327.8Memory corruption while reading ACPI config through the user mode app.CVE-2023-435337.5Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
CVE-2023-43522: High severity, CVSS 7.5 | Vulnix