We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-43540

Buffer Copy Without Checking Size of Input in Bluetooth HOST



Description

Memory corruption while processing the IOCTL FM HCI WRITE request.

Reserved 2023-09-19 | Published 2024-03-04 | Updated 2024-08-02 | Assigner qualcomm


HIGH: 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')

Product status

Default status
unaffected

AQT1000
affected

FastConnect 6200
affected

FastConnect 6700
affected

FastConnect 6800
affected

FastConnect 6900
affected

FastConnect 7800
affected

QCA6391
affected

QCA6420
affected

QCA6430
affected

SC8380XP
affected

SM6250
affected

Snapdragon 7c Compute Platform (SC7180-AC)
affected

Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"
affected

Snapdragon 7c+ Gen 3 Compute
affected

Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"
affected

Snapdragon 8cx Compute Platform (SC8180X-AA, AB)
affected

Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"
affected

Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)
affected

WCD9340
affected

WCD9341
affected

WCD9380
affected

WCD9385
affected

WSA8810
affected

WSA8815
affected

WSA8830
affected

WSA8835
affected

WSA8840
affected

WSA8845
affected

WSA8845H
affected

References

www.qualcomm.com/...t-security/bulletins/march-2024-bulletin

cve.org (CVE-2023-43540)

nvd.nist.gov (CVE-2023-43540)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2023-43540

Support options

Helpdesk Chat, Email, Knowledgebase