CVE-2023-43543

MEDIUM

6.7

Description

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

CVE Details

CVSS v3.1 Score6.7

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published6/3/2024

Last Modified1/27/2025

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:qam8255pqualcomm:qam8255p_firmwarequalcomm:qam8775pqualcomm:qam8775p_firmwarequalcomm:qca6584auqualcomm:qca6584au_firmwarequalcomm:qca6698aqqualcomm:qca6698aq_firmwarequalcomm:sa8255pqualcomm:sa8255p_firmwarequalcomm:sa8770pqualcomm:sa8770p_firmwarequalcomm:sa8775pqualcomm:sa8775p_firmwarequalcomm:sa9000pqualcomm:sa9000p_firmwarequalcomm:snapdragon_auto_5g_modem-rf_gen_2qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmwarequalcomm:snapdragon_w5\+_gen_1_wearablequalcomm:snapdragon_w5\+_gen_1_wearable_firmwarequalcomm:sw5100qualcomm:sw5100_firmwarequalcomm:sw5100pqualcomm:sw5100p_firmwarequalcomm:wcn3980qualcomm:wcn3980_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Weaknesses (CWE)

CWE-416CWE-416

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html(product-security@qualcomm.com)

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.