CVE-2023-43556

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Memory corruption in Hypervisor when platform information mentioned is not aligned.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8295P; QCA6391; QCA6574AU; QCA6595; QCA6696; QCA6698AQ; QCA8081; QCA8337; QCM4490; QCM5430; QCM6490; QCN6024; QCN9011; QCN9012; QCN9024
qualcommar8035_firmware*
qualcommfastconnect_6700_firmware*
qualcommfastconnect_6900_firmware*
qualcommfastconnect_7800_firmware*
qualcommflight_rb5_5g_platform_firmware*
qualcommqam8295p_firmware*
qualcommqca6391_firmware*
qualcommqca6574au_firmware*
qualcommqca6595_firmware*
qualcommqca6696_firmware*
qualcommqca6698aq_firmware*
qualcommqca8081_firmware*
qualcommqca8337_firmware*
qualcommqcm4490_firmware*
qualcommqcm5430_firmware*
qualcommqcm6490_firmware*
qualcommqcn6024_firmware*
qualcommqcn9011_firmware*
qualcommqcn9012_firmware*
qualcommqcn9024_firmware*
qualcommqcs4490_firmware*
qualcommqcs5430_firmware*
qualcommqcs6490_firmware*
qualcommqcs7230_firmware*
qualcommqcs8250_firmware*
qualcommqrb5165m_firmware*
qualcommqrb5165n_firmware*
qualcommqsm8350_firmware*
qualcommqualcomm_video_collaboration_vc3_platform_firmware*
qualcommqualcomm_video_collaboration_vc5_platform_firmware*
qualcommrobotics_rb5_platform_firmware*
qualcommsa8295p_firmware*
qualcommsa8540p_firmware*
qualcommsa9000p_firmware*
qualcommsd888_firmware*
qualcommsdx57m_firmware*
qualcommsm7315_firmware*
qualcommsm7325p_firmware*
qualcommsnapdragon_4_gen_2_mobile_platform_firmware*
qualcommsnapdragon_778g_5g_mobile_platform_firmware*
qualcommsnapdragon_780g_5g_mobile_platform_firmware*
qualcommsnapdragon_8_gen_1_mobile_platform_firmware*
qualcommsnapdragon_888_5g_mobile_platform_firmware*
qualcommsnapdragon_ar2_gen_1_platform_firmware*
qualcommsnapdragon_x65_5g_modem-rf_system_firmware*
qualcommsnapdragon_x70_modem-rf_system_firmware*
qualcommssg2115p_firmware*
qualcommssg2125p_firmware*
qualcommsxr1230p_firmware*

References

Timeline

Published
Jun 3, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-43568.8Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI CVE-2023-435665.4In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationCVE-2023-435676.7A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevCVE-2023-435684.4A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with eleCVE-2023-435696.7A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privilegesCVE-2023-43578.8Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access reCVE-2023-435706.7A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permiCVE-2023-435716.7A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevatCVE-2023-435724.4A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevaCVE-2023-435736.7A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attackerCVE-2023-435744.4A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attackeCVE-2023-435756.7A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevate
CVE-2023-43556: High severity, CVSS 8.8 | Vulnix