CVE-2023-43526: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43526?
The severity of CVE-2023-43526 is currently classified as critical due to the potential for memory corruption vulnerabilities.
How do I fix CVE-2023-43526?
To fix CVE-2023-43526, apply the latest firmware updates provided by Qualcomm for affected devices.
What devices are affected by CVE-2023-43526?
CVE-2023-43526 affects multiple Qualcomm firmware models including Ar8035, Fastconnect 7800, and several others as listed in the advisory.
What is the nature of the vulnerability in CVE-2023-43526?
CVE-2023-43526 involves memory corruption while querying module parameters from the Listen Sound model client in the kernel from user space.
When was CVE-2023-43526 disclosed?
CVE-2023-43526 was disclosed in May 2024 as part of a security bulletin addressing multiple vulnerabilities.