CVE-2023-43543

MEDIUM

6.7

Descripcion

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

Detalles CVE

Puntuacion CVSS v3.16.7

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosHIGH

Interaccion usuarioNONE

Publicado6/3/2024

Ultima modificacion1/27/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

qualcomm:qam8255pqualcomm:qam8255p_firmwarequalcomm:qam8775pqualcomm:qam8775p_firmwarequalcomm:qca6584auqualcomm:qca6584au_firmwarequalcomm:qca6698aqqualcomm:qca6698aq_firmwarequalcomm:sa8255pqualcomm:sa8255p_firmwarequalcomm:sa8770pqualcomm:sa8770p_firmwarequalcomm:sa8775pqualcomm:sa8775p_firmwarequalcomm:sa9000pqualcomm:sa9000p_firmwarequalcomm:snapdragon_auto_5g_modem-rf_gen_2qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmwarequalcomm:snapdragon_w5\+_gen_1_wearablequalcomm:snapdragon_w5\+_gen_1_wearable_firmwarequalcomm:sw5100qualcomm:sw5100_firmwarequalcomm:sw5100pqualcomm:sw5100p_firmwarequalcomm:wcn3980qualcomm:wcn3980_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Debilidades (CWE)

CWE-416CWE-416

Referencias

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html(product-security@qualcomm.com)

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.