CVE-2023-43520: Stack-based Buffer Overflow in WLAN HOST
Published Feb 5, 2024
·Updated
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Affected Software
141 affected components
Google Android
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Flight Rb5 5g Platform Firmware
Qualcomm Flight Rb5 5g Platform
All of the following
Qualcomm Qam8255p Firmware
Qualcomm Qam8255p
All of the following
Qualcomm Qam8650p Firmware
Qualcomm Qam8650p
All of the following
Qualcomm Qam8775p Firmware
Qualcomm Qam8775p
All of the following
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1h
All of the following
Qualcomm Qamsrv1m Firmware
Qualcomm Qamsrv1m
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6554a Firmware
Qualcomm Qca6554a
All of the following
Qualcomm Qca6564au Firmware
Qualcomm Qca6564au
All of the following
Qualcomm Qca6574 Firmware
Qualcomm QCA6574
All of the following
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca6688aq Firmware
Qualcomm Qca6688aq
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Qcc2073 Firmware
Qualcomm Qcc2073
All of the following
Qualcomm Qcc2076 Firmware
Qualcomm Qcc2076
All of the following
Qualcomm Qcc710 Firmware
Qualcomm Qcc710
All of the following
Qualcomm Qcm8550 Firmware
Qualcomm Qcm8550
All of the following
Qualcomm Qcn6224 Firmware
Qualcomm Qcn6224
All of the following
Qualcomm Qcn6274 Firmware
Qualcomm Qcn6274
All of the following
Qualcomm Qcs7230 Firmware
Qualcomm Qcs7230
All of the following
Qualcomm Qcs8250 Firmware
Qualcomm Qcs8250
All of the following
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
All of the following
Qualcomm Qfw7114 Firmware
Qualcomm Qfw7114
All of the following
Qualcomm Qfw7124 Firmware
Qualcomm Qfw7124
All of the following
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
All of the following
Qualcomm Video Collaboration Vc5 Platform Firmware
Qualcomm Video Collaboration Vc5 Platform
All of the following
Qualcomm Robotics Rb5 Platform Firmware
Qualcomm Robotics Rb5 Platform
All of the following
Qualcomm Sa6145p Firmware
Qualcomm Sa6145p
All of the following
Qualcomm Sa6150p Firmware
Qualcomm Sa6150p
All of the following
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
All of the following
Qualcomm Sa8145p Firmware
Qualcomm Sa8145p
All of the following
Qualcomm Sa8150p Firmware
Qualcomm Sa8150p
All of the following
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
All of the following
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
All of the following
Qualcomm Sa8255p Firmware
Qualcomm Sa8255p
All of the following
Qualcomm Sa8650p Firmware
Qualcomm Sa8650p
All of the following
Qualcomm Sa8770p Firmware
Qualcomm Sa8770p
All of the following
Qualcomm Sa8775p Firmware
Qualcomm Sa8775p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Sm8550p Firmware
Qualcomm Sm8550p
All of the following
Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar2 Gen 1 Platform
All of the following
Qualcomm Snapdragon X75 5g Modem-rf System Firmware
Qualcomm Snapdragon X75 5g Modem-rf System
All of the following
Qualcomm Srv1h Firmware
Qualcomm Srv1h
All of the following
Qualcomm Srv1m Firmware
Qualcomm Srv1m
All of the following
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
All of the following
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
All of the following
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
All of the following
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of the following
Qualcomm Wcd9340 Firmware
Qualcomm Wcd9340
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Event History
Feb 5, 2024
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Feb 6, 2024
CVE Published
via MITRE·05:47 AM
Data Sourced
via MITRE·05:47 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-43520?
CVE-2023-43520 is classified with a high severity due to the potential for memory corruption affecting the parsing of beacon TID to link mapping information.
2
How do I fix CVE-2023-43520?
To fix CVE-2023-43520, update your devices or firmware to the latest version provided by the affected manufacturers, which includes patches for the vulnerability.
3
Which devices are affected by CVE-2023-43520?
CVE-2023-43520 affects several devices, primarily those running Google Android, as well as various Qualcomm firmware such as Fastconnect and Snapdragon.
4
How can I mitigate CVE-2023-43520?
Mitigation for CVE-2023-43520 involves applying updates from device manufacturers promptly and ensuring that all network configurations are secure.
5
What type of vulnerability is CVE-2023-43520?
CVE-2023-43520 is a memory corruption vulnerability that can potentially allow an attacker to manipulate or disrupt normal system operation.