CVE-2023-43516: Use of out-of-range pointer offset in Video
Memory corruption when malformed message payload is received from firmware.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/opensource/video-driverto a version that resolves this vulnerability.Fixed in SoCVersion:2024-02-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43516?
CVE-2023-43516 is classified as a memory corruption vulnerability affecting Qualcomm firmware.
How does CVE-2023-43516 impact devices?
CVE-2023-43516 allows for potential exploitation when a malformed message payload is received from the firmware.
Which affected firmware versions are vulnerable to CVE-2023-43516?
CVE-2023-43516 affects Qualcomm Fastconnect 6900, Fastconnect 7800, Qcm8550, Qcs8550, Snapdragon 8 Gen 1 Mobile Platform, WCD9380, WSA8830, and WSA8835 firmware.
How do I fix CVE-2023-43516?
Fixing CVE-2023-43516 involves updating to the latest firmware version provided by Qualcomm.
Are there any known exploits for CVE-2023-43516?
As of now, there are no publicly disclosed exploits specifically known for CVE-2023-43516.