CVE-2023-43515 MEDIUM

CVE-2023-43515: Buffer copy without checking size of input (Classic buffer overflow) in HLOS

Vendor Qualcomm, Inc.
Product Snapdragon
Weakness CWE-120
Published April 1, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

6.6/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

What the vulnerability does

01Description

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

Key dates

02Disclosure timeline

April 1, 2024 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-5734 TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow CVE-2026-9380 Edimax BR-6675nD POST Request formL2TPSetup buffer overflow CVE-2021-34780 Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities CVE-2022-20901 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities CVE-2020-36995 Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service