CVE-2023-43535: Improper Validation of Array Index in Display
Published Feb 6, 2024
·Updated
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.
Affected Software
26 affected components
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Sc8380xp Firmware
Qualcomm Sc8380xp
All of the following
Qualcomm Snapdragon 7c\+ Gen 3 Compute Firmware
Qualcomm Snapdragon 7c\+ Gen 3 Compute
All of the following
Qualcomm Snapdragon 8cx Gen 3 Compute Platform Firmware
Qualcomm Snapdragon 8cx Gen 3 Compute Platform
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Event History
Feb 6, 2024
CVE Published
via MITRE·05:47 AM
Data Sourced
via MITRE·05:47 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-43535?
CVE-2023-43535 is classified as a high-severity vulnerability due to memory corruption risks.
2
How do I fix CVE-2023-43535?
To mitigate CVE-2023-43535, update the affected Qualcomm firmware to the latest version provided by Qualcomm.
3
What software is affected by CVE-2023-43535?
CVE-2023-43535 affects several versions of Qualcomm's Fastconnect and Snapdragon firmware products.
4
What is the nature of the vulnerability in CVE-2023-43535?
CVE-2023-43535 is caused by memory corruption when negative display IDs are processed during the DISPLAYESCAPE event.
5
Is CVE-2023-43535 being actively exploited in the wild?
As of now, there is no public information indicating that CVE-2023-43535 is actively being exploited.