CVE-2023-43554

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing IOCTL handler in FastRPC.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6420; QCA6430; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8180X+SDX55; SC8380XP; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform (SC8180X-AA, AB)
qualcomm	aqt1000_firmware	<= *
qualcomm	fastconnect_6200_firmware	<= *
qualcomm	fastconnect_6700_firmware	<= *
qualcomm	fastconnect_6800_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	fastconnect_7800_firmware	<= *
qualcomm	qca6391_firmware	<= *
qualcomm	qca6420_firmware	<= *
qualcomm	qca6430_firmware	<= *
qualcomm	qcm5430_firmware	<= *
qualcomm	qcm6490_firmware	<= *
qualcomm	qcs5430_firmware	<= *
qualcomm	qcs6490_firmware	<= *
qualcomm	qualcomm_video_collaboration_vc3_platform_firmware	<= *
qualcomm	sc8380xp_firmware	<= *
qualcomm	wcd9340_firmware	<= *
qualcomm	wcd9341_firmware	<= *
qualcomm	wcd9370_firmware	<= *
qualcomm	wcd9375_firmware	<= *
qualcomm	wcd9380_firmware	<= *
qualcomm	wcd9385_firmware	<= *
qualcomm	wsa8810_firmware	<= *
qualcomm	wsa8815_firmware	<= *
qualcomm	wsa8830_firmware	<= *
qualcomm	wsa8835_firmware	<= *
qualcomm	wsa8840_firmware	<= *
qualcomm	wsa8845_firmware	<= *
qualcomm	wsa8845h_firmware	<= *

References

Timeline

Published: Jul 1, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-435557.5Information disclosure in Video while parsing mp2 clip with invalid section length.CVE-2023-435568.8Memory corruption in Hypervisor when platform information mentioned is not aligned.CVE-2023-43568.8Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI CVE-2023-435665.4In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration CVE-2023-435676.7A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elev CVE-2023-435684.4A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with ele CVE-2023-435696.7A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges CVE-2023-43578.8Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access re CVE-2023-435706.7A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permi CVE-2023-435716.7A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevat CVE-2023-435724.4A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with eleva CVE-2023-435736.7A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker