CVE-2023-43534

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-823CWE-119

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8255P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6391; QCA6554A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6688AQ; QCA6696
qualcommsnapdragonar8035; fastconnect_6900; fastconnect_7800; flight_rb5_5g_platform; qam8255p; qam8650p; qam8775p; qamsrv1h; qamsrv1m; qca6391; qca6554a; qca6564au; qca6574; qca6574a; qca6574au; qca6584au; qca6595; qca6595au; qca6688aq; qca6696

References

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435357.8Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.CVE-2023-435367.5Transient DOS while parse fils IE with length equal to 1.CVE-2023-435377.5Information disclosure while handling T2LM Action Frame in WLAN Host.CVE-2023-435387.8Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.CVE-2023-435397.5Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.CVE-2023-43548.8Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to pCVE-2023-435407.8Memory corruption while processing the IOCTL FM HCI WRITE request.CVE-2023-435417.8Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.CVE-2023-435427.8Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.CVE-2023-435437.0Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.CVE-2023-435447.8Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.CVE-2023-435457.8Memory corruption when more scan frequency list or channels are sent from the user space.
CVE-2023-43534: Critical severity, CVSS 9.8 | Vulnix