CVE-2023-43515: Buffer copy without checking size of input (Classic buffer overflow) in HLOS
Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUGFS enabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-04-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43515?
CVE-2023-43515 has a high severity due to memory corruption vulnerabilities that can lead to system instability.
How do I fix CVE-2023-43515?
To fix CVE-2023-43515, update your Qualcomm firmware versions to the latest available that addresses this vulnerability.
What systems are affected by CVE-2023-43515?
CVE-2023-43515 affects Qualcomm Fastconnect 6900 and 7800 firmware, Snapdragon 8 Gen 1 mobile firmware, WCD9380 firmware, and WSA8830 and WSA8835 firmware.
What type of vulnerability is CVE-2023-43515?
CVE-2023-43515 is a memory corruption vulnerability that occurs while running kernel address sanitizers.
Is CVE-2023-43515 remotely exploitable?
CVE-2023-43515 is not specifically noted as remotely exploitable, but memory corruption vulnerabilities can potentially lead to various security risks.