CVE-2023-43534: Use of Out-of-range Pointer Offset in WLAN HOST
Published Feb 1, 2024
·Updated
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
Affected Software
134 affected componentsFixes available
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Flight Rb5 5g Platform Firmware
Qualcomm Flight Rb5 5g Platform
All of the following
Qualcomm Qam8255p Firmware
Qualcomm Qam8255p
All of the following
Qualcomm Qam8650p Firmware
Qualcomm Qam8650p
All of the following
Qualcomm Qam8775p Firmware
Qualcomm Qam8775p
All of the following
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1h
All of the following
Qualcomm Qamsrv1m Firmware
Qualcomm Qamsrv1m
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qca6554a Firmware
Qualcomm Qca6554a
All of the following
Qualcomm Qca6564au Firmware
Qualcomm Qca6564au
All of the following
Qualcomm Qca6574 Firmware
Qualcomm QCA6574
All of the following
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca6688aq Firmware
Qualcomm Qca6688aq
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Qcc2073 Firmware
Qualcomm Qcc2073
All of the following
Qualcomm Qcc2076 Firmware
Qualcomm Qcc2076
All of the following
Qualcomm Qcc710 Firmware
Qualcomm Qcc710
All of the following
Qualcomm Qcm8550 Firmware
Qualcomm Qcm8550
All of the following
Qualcomm Qcn6224 Firmware
Qualcomm Qcn6224
All of the following
Qualcomm Qcn6274 Firmware
Qualcomm Qcn6274
All of the following
Qualcomm Qcs7230 Firmware
Qualcomm Qcs7230
All of the following
Qualcomm Qcs8250 Firmware
Qualcomm Qcs8250
All of the following
Qualcomm Qcs8550 Firmware
Qualcomm Qcs8550
All of the following
Qualcomm Qfw7114 Firmware
Qualcomm Qfw7114
All of the following
Qualcomm Qfw7124 Firmware
Qualcomm Qfw7124
All of the following
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
All of the following
Qualcomm Video Collaboration Vc5 Platform Firmware
Qualcomm Video Collaboration Vc5 Platform
All of the following
Qualcomm Robotics Rb5 Platform Firmware
Qualcomm Robotics Rb5 Platform
All of the following
Qualcomm Sa6155p Firmware
Qualcomm Sa6155p
All of the following
Qualcomm Sa8155p Firmware
Qualcomm Sa8155p
All of the following
Qualcomm Sa8195p Firmware
Qualcomm Sa8195p
All of the following
Qualcomm Sa8255p Firmware
Qualcomm Sa8255p
All of the following
Qualcomm Sa8650p Firmware
Qualcomm Sa8650p
All of the following
Qualcomm Sa8770p Firmware
Qualcomm Sa8770p
All of the following
Qualcomm Sa8775p Firmware
Qualcomm Sa8775p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Sm8550p Firmware
Qualcomm Sm8550p
All of the following
Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar2 Gen 1 Platform
All of the following
Qualcomm Snapdragon X75 5g Modem-rf System Firmware
Qualcomm Snapdragon X75 5g Modem-rf System
All of the following
Qualcomm Srv1h Firmware
Qualcomm Srv1h
All of the following
Qualcomm Srv1m Firmware
Qualcomm Srv1m
All of the following
Qualcomm Ssg2115p Firmware
Qualcomm Ssg2115p
All of the following
Qualcomm Ssg2125p Firmware
Qualcomm Ssg2125p
All of the following
Qualcomm Sxr1230p Firmware
Qualcomm Sxr1230p
All of the following
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of the following
Qualcomm Wcd9340 Firmware
Qualcomm Wcd9340
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Google Android
android/platform/vendor/qcom-opensource/wlan/qcacld-3.0>=SoCVersion:0<SoCVersion:2024-02-05
SoCVersion:2024-02-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qcacld-3.0to a version that resolves this vulnerability.Fixed in SoCVersion:2024-02-05
Event History
Feb 1, 2024
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Feb 5, 2024
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Feb 6, 2024
CVE Published
via MITRE·05:47 AM
Data Sourced
via MITRE·05:47 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-43534?
CVE-2023-43534 has a severity that is expected to be high due to potential memory corruption issues.
2
How do I fix CVE-2023-43534?
To fix CVE-2023-43534, update affected firmware or software versions as recommended by the vendor.
3
Which products are affected by CVE-2023-43534?
CVE-2023-43534 affects various Qualcomm products, including firmware for Android and Qualcomm access points.
4
What are the implications of CVE-2023-43534?
CVE-2023-43534 could allow an attacker to execute arbitrary code via a malicious access point connection.
5
Is CVE-2023-43534 actively being exploited?
As of the latest information, there are no reported active exploits for CVE-2023-43534, but vigilance is advised.