CVE-2023-43545

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption when more scan frequency list or channels are sent from the user space.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 7800; QCA6554A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6696; QCA8081; QCA8337; QCC2073; QCC2076; QCC710; QCN6224; QCN6274; QFW7114; QFW7124
qualcommar8035_firmware*
qualcommfastconnect_7800_firmware*
qualcommqca6554a_firmware*
qualcommqca6564au_firmware*
qualcommqca6574_firmware*
qualcommqca6574a_firmware*
qualcommqca6574au_firmware*
qualcommqca6584au_firmware*
qualcommqca6595_firmware*
qualcommqca6595au_firmware*
qualcommqca6696_firmware*
qualcommqca8081_firmware*
qualcommqca8337_firmware*
qualcommqcc2073_firmware*
qualcommqcc2076_firmware*
qualcommqcc710_firmware*
qualcommqcn6224_firmware*
qualcommqcn6274_firmware*
qualcommqfw7114_firmware*
qualcommqfw7124_firmware*
qualcommsd660_firmware*
qualcommsnapdragon_660_mobile_platform_firmware*
qualcommsnapdragon_x75_5g_modem-rf_system_firmware*
qualcommwcd9335_firmware*
qualcommwcd9340_firmware*
qualcommwcd9341_firmware*
qualcommwcn3980_firmware*
qualcommwcn3990_firmware*

References

Timeline

Published
Jun 3, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-435467.8Memory corruption while invoking HGSL IOCTL context create.CVE-2023-435477.8Memory corruption while invoking IOCTLs calls in Automotive Multimedia.CVE-2023-435489.8Memory corruption while parsing qcp clip with invalid chunk data size.CVE-2023-435497.8Memory corruption while processing TPC target power table in FTM TPC.CVE-2023-43558.8Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption vCVE-2023-435507.8Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.CVE-2023-435517.5Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send CVE-2023-435529.8Memory corruption while processing MBSSID beacon containing several subelement IE.CVE-2023-435539.8Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.CVE-2023-435547.8Memory corruption while processing IOCTL handler in FastRPC.CVE-2023-435557.5Information disclosure in Video while parsing mp2 clip with invalid section length.CVE-2023-435568.8Memory corruption in Hypervisor when platform information mentioned is not aligned.
CVE-2023-43545: High severity, CVSS 7.8 | Vulnix