Integer overflow in Qualcomm products - CVE-2023-43545
Published: June 4, 2024
Vulnerability identifier: #VU91035
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-43545
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation in WLAN HOST. A local privileged application can execute arbitrary code.
Affected software
QCC2076
WCN3990
WCN3980
WCD9341
WCD9340
WCD9335
Snapdragon X75 5G Modem-RF System
Snapdragon 660 Mobile Platform
SD660
QFW7124
QFW7114
QCN6274
QCN6224
QCC710
AR8035
QCC2073
QCA8337
QCA8081
QCA6696
QCA6595AU
QCA6595
QCA6584AU
QCA6574A
QCA6574
QCA6564AU
QCA6554A
FastConnect 7800
Pixel
QCA6574AU
WCN3990
WCN3980
WCD9341
WCD9340
WCD9335
Snapdragon X75 5G Modem-RF System
Snapdragon 660 Mobile Platform
SD660
QFW7124
QFW7114
QCN6274
QCN6224
QCC710
AR8035
QCC2073
QCA8337
QCA8081
QCA6696
QCA6595AU
QCA6595
QCA6584AU
QCA6574A
QCA6574
QCA6564AU
QCA6554A
FastConnect 7800
Pixel
QCA6574AU
How to mitigate CVE-2023-43545
Install security update from vendor's website.
Pixel - update to 2024-06-05