CVE-2023-43540

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing the IOCTL FM HCI WRITE request.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6420; QCA6430; SC8380XP; SM6250; Snapdragon 7c Compute Platform (SC7180-AC); Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform (SC8180X-AA, AB); Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"; Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); WCD9340; WCD9341
qualcommaqt1000_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6430_firmware<= *
qualcommsc8380xp_firmware<= *
qualcommsm6250_firmware<= *
qualcommwcd9340_firmware<= *
qualcommwcd9341_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcd9385_firmware<= *
qualcommwsa8810_firmware<= *
qualcommwsa8815_firmware<= *
qualcommwsa8830_firmware<= *
qualcommwsa8835_firmware<= *
qualcommwsa8840_firmware<= *
qualcommwsa8845_firmware<= *
qualcommwsa8845h_firmware<= *

References

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-435417.8Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.CVE-2023-435427.8Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.CVE-2023-435437.0Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.CVE-2023-435447.8Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.CVE-2023-435457.8Memory corruption when more scan frequency list or channels are sent from the user space.CVE-2023-435467.8Memory corruption while invoking HGSL IOCTL context create.CVE-2023-435477.8Memory corruption while invoking IOCTLs calls in Automotive Multimedia.CVE-2023-435489.8Memory corruption while parsing qcp clip with invalid chunk data size.CVE-2023-435497.8Memory corruption while processing TPC target power table in FTM TPC.CVE-2023-43558.8Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption vCVE-2023-435507.8Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.CVE-2023-435517.5Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send