CVE-2023-43525: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while copying the sound model data from user to kernel buffer during sound model register.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43525?
CVE-2023-43525 is classified as a critical vulnerability due to the potential for memory corruption.
How do I fix CVE-2023-43525?
To fix CVE-2023-43525, users should update the affected Qualcomm firmware to the latest version provided by Qualcomm.
What devices are affected by CVE-2023-43525?
CVE-2023-43525 affects various Qualcomm devices including models like Ar8035, Fastconnect 7800, and others listed in the firmware reference.
What can happen if CVE-2023-43525 is exploited?
Exploitation of CVE-2023-43525 could potentially lead to unauthorized access or control over the affected devices.
Is there any workaround for CVE-2023-43525 until a fix is applied?
Currently, the recommended course of action is to apply the firmware update from Qualcomm as there are no known effective workarounds.