by Kastro
Paper/Archive/CVE-2023-43556

CVE-2023-43556

Qualcomm, Inc. Snapdragon — Buffer Copy Without Checking Size of Input in Hypervisor

EPSS 0.1%CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 1.0.010 × 200.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption in Hypervisor when platform information mentioned is not aligned.

Affected

ProductAffectedFixed inSource
SnapdragonAR8035–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6900–CNA
SnapdragonFastConnect 7800–CNA
SnapdragonFlight RB5 5G Platform–CNA
SnapdragonQAM8295P–CNA
SnapdragonQCA6391–CNA
SnapdragonQCA6574AU–CNA
SnapdragonQCA6595–CNA
SnapdragonQCA6696–CNA
SnapdragonQCA6698AQ–CNA
SnapdragonQCA8081–CNA

Scores by source

qualcomm (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdocs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html