CVE-2023-43548

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while parsing qcp clip with invalid chunk data size.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6310; QCA6320; QCA6391; QCA6420; QCA6430; QCA6574; QCA6574A; QCA6574AU
qualcommaqt1000_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca6310_firmware<= *
qualcommqca6320_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6420_firmware<= *
qualcommqca6430_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6595_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6678aq_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqcm2290_firmware<= *
qualcommqcm4290_firmware<= *
qualcommqcm4490_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcn7606_firmware<= *
qualcommqcs2290_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs4290_firmware<= *
qualcommqcs4490_firmware<= *
qualcommqcs610_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqualcomm_video_collaboration_vc1_platform_firmware<= *
qualcommqualcomm_video_collaboration_vc3_platform_firmware<= *
qualcommsa4150p_firmware<= *
qualcommsa4155p_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsa8255p_firmware<= *
qualcommsa8295p_firmware<= *

References

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-435497.8Memory corruption while processing TPC target power table in FTM TPC.CVE-2023-43558.8Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption vCVE-2023-435507.8Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.CVE-2023-435517.5Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send CVE-2023-435529.8Memory corruption while processing MBSSID beacon containing several subelement IE.CVE-2023-435539.8Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.CVE-2023-435547.8Memory corruption while processing IOCTL handler in FastRPC.CVE-2023-435557.5Information disclosure in Video while parsing mp2 clip with invalid section length.CVE-2023-435568.8Memory corruption in Hypervisor when platform information mentioned is not aligned.CVE-2023-43568.8Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI CVE-2023-435665.4In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationCVE-2023-435676.7A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elev
CVE-2023-43548: Critical severity, CVSS 9.8 | Vulnix