CVE-2023-43552

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing MBSSID beacon containing several subelement IE.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; CSR8811; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5302; IPQ5312; IPQ5332; IPQ6000; IPQ6010; IPQ6018; IPQ6028
qualcommar8035_firmware<= *
qualcommcsr8811_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommflight_rb5_5g_platform_firmware<= *
qualcommimmersive_home_214_platform_firmware<= *
qualcommimmersive_home_216_platform_firmware<= *
qualcommimmersive_home_316_platform_firmware<= *
qualcommimmersive_home_318_platform_firmware<= *
qualcommimmersive_home_3210_platform_firmware<= *
qualcommimmersive_home_326_platform_firmware<= *
qualcommipq5010_firmware<= *
qualcommipq5028_firmware<= *
qualcommipq5302_firmware<= *
qualcommipq5312_firmware<= *
qualcommipq5332_firmware<= *
qualcommipq6000_firmware<= *
qualcommipq6010_firmware<= *
qualcommipq6018_firmware<= *
qualcommipq6028_firmware<= *
qualcommipq8070a_firmware<= *
qualcommipq8071a_firmware<= *
qualcommipq8072a_firmware<= *
qualcommipq8074a_firmware<= *
qualcommipq8076_firmware<= *
qualcommipq8076a_firmware<= *
qualcommipq8078_firmware<= *
qualcommipq8078a_firmware<= *
qualcommipq8173_firmware<= *
qualcommipq8174_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9570_firmware<= *
qualcommipq9574_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqamsrv1h_firmware<= *
qualcommqamsrv1m_firmware<= *
qualcommqca0000_firmware<= *
qualcommqca4024_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6554a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6595_firmware<= *

References

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-435539.8Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.CVE-2023-435547.8Memory corruption while processing IOCTL handler in FastRPC.CVE-2023-435557.5Information disclosure in Video while parsing mp2 clip with invalid section length.CVE-2023-435568.8Memory corruption in Hypervisor when platform information mentioned is not aligned.CVE-2023-43568.8Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI CVE-2023-435665.4In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationCVE-2023-435676.7A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevCVE-2023-435684.4A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with eleCVE-2023-435696.7A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privilegesCVE-2023-43578.8Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access reCVE-2023-435706.7A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permiCVE-2023-435716.7A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevat
CVE-2023-43552: Critical severity, CVSS 9.8 | Vulnix