CVE-2023-43528

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126 CWE-125

Affected software

No affected versions have been published.

Timeline

Published: May 6, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-435297.5Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.CVE-2023-43538.8Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a CVE-2023-435307.8Memory corruption in HLOS while checking for the storage type.CVE-2023-435317.8Memory corruption while verifying the serialized header when the key pairs are generated.CVE-2023-435327.8Memory corruption while reading ACPI config through the user mode app.CVE-2023-435337.5Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.CVE-2023-435349.8Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.CVE-2023-435357.8Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.CVE-2023-435367.5Transient DOS while parse fils IE with length equal to 1.CVE-2023-435377.5Information disclosure while handling T2LM Action Frame in WLAN Host.CVE-2023-435387.8Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.CVE-2023-435397.5Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.