CVE-2023-43543

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-43543
Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html Patch Vendor Advisory
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
History

27 Jan 2025, 19:40

Type Values Removed Values Added
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html - Patch, Vendor Advisory
CPE cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*
First Time Qualcomm wcn3980 Firmware
Qualcomm qam8775p Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm sw5100 Firmware
Qualcomm wcn3988 Firmware
Qualcomm sa8770p Firmware
Qualcomm wsa8835
Qualcomm sw5100p Firmware
Qualcomm sw5100p
Qualcomm sa8255p Firmware
Qualcomm qca6698aq Firmware
Qualcomm snapdragon W5\+ Gen 1 Wearable
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm qam8775p
Qualcomm qca6584au Firmware
Qualcomm wsa8835 Firmware
Qualcomm sa9000p
Qualcomm wsa8830 Firmware
Qualcomm qam8255p Firmware
Qualcomm sa8770p
Qualcomm sa8775p
Qualcomm qam8255p
Qualcomm wcn3988
Qualcomm sa8255p
Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware
Qualcomm
Qualcomm sa8775p Firmware
Qualcomm sa9000p Firmware
Qualcomm wcn3980
Qualcomm sw5100
Qualcomm qca6584au
Qualcomm wsa8830
Qualcomm qca6698aq

21 Nov 2024, 08:24

Type Values Removed Values Added
Summary
  • (es) Corrupción de la memoria en audio durante una reproducción o grabación debido a la condición de ejecución entre la asignación y desasignación del objeto gráfico.
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html -

03 Jun 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-03 10:15

Updated : 2025-01-27 19:40

NVD link : CVE-2023-43543

Mitre link : CVE-2023-43543

CVE.ORG link : CVE-2023-43543

JSON object : View

Products Affected

qualcomm

  • wcn3988
  • sa8770p_firmware
  • sa8255p
  • snapdragon_auto_5g_modem-rf_gen_2
  • wcn3980_firmware
  • sw5100p
  • sa9000p_firmware
  • wsa8830
  • qca6584au
  • wsa8830_firmware
  • wsa8835
  • sa9000p
  • wcn3988_firmware
  • qca6698aq
  • snapdragon_w5\+_gen_1_wearable
  • sa8775p
  • qam8775p
  • qca6698aq_firmware
  • sw5100p_firmware
  • sa8775p_firmware
  • qam8255p
  • sa8770p
  • snapdragon_w5\+_gen_1_wearable_firmware
  • sw5100_firmware
  • sw5100
  • wsa8835_firmware
  • qca6584au_firmware
  • sa8255p_firmware
  • qam8255p_firmware
  • qam8775p_firmware
  • snapdragon_auto_5g_modem-rf_gen_2_firmware
  • wcn3980
CWE
CWE-416

Use After Free