First published: Mon Jun 03 2024(Updated: )
Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Qualcomm QAM8255P | ||
Qualcomm QAM8255P Firmware | ||
All of | ||
Qualcomm QAM8775P | ||
qualcomm qam8775p Firmware | ||
All of | ||
qualcomm QCA6584AU firmware | ||
Qualcomm QCA6584 | ||
All of | ||
Qualcomm QCA6698AQ | ||
Qualcomm QCA6698AQ Firmware | ||
All of | ||
Qualcomm SA8255P Firmware | ||
Qualcomm SA8255P Firmware | ||
All of | ||
qualcomm sa8770p | ||
qualcomm sa8770p firmware | ||
All of | ||
Qualcomm SA8775P | ||
Qualcomm SA8775P | ||
All of | ||
qualcomm sa9000p firmware | ||
Qualcomm SA9000P | ||
All of | ||
Qualcomm Snapdragon Auto 5G-RF Gen 2 Firmware | ||
Qualcomm Snapdragon Auto 5G Modem-RF | ||
All of | ||
qualcomm snapdragon w5+ gen 1 wearable firmware | ||
Qualcomm Snapdragon W5+ Gen 1 Wearable | ||
All of | ||
Qualcomm SW5100P | ||
Qualcomm SW5100P | ||
All of | ||
Qualcomm SW5100 Firmware | ||
Qualcomm SW5100 Firmware | ||
All of | ||
Qualcomm Wcn3980 | ||
qualcomm wcn3980 firmware | ||
All of | ||
qualcomm wcn3988 firmware | ||
Qualcomm WCN3988 | ||
All of | ||
Qualcomm WSA8830 | ||
Qualcomm WSA8830 | ||
All of | ||
Qualcomm WSA8835 | ||
Qualcomm WSA8835 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-43543 is critical due to memory corruption vulnerabilities in the audio handling of affected firmware.
To fix CVE-2023-43543, users should update their Qualcomm firmware to the latest version provided by the manufacturer.
CVE-2023-43543 affects various Qualcomm devices including QAM8255P, QAM8775P, QCA6584AU, and others listed in the vulnerability report.
The potential impacts of CVE-2023-43543 include system crashes, arbitrary code execution, and unauthorized access during audio playback or recording.
Currently, there are no known effective workarounds for CVE-2023-43543, and updating the firmware is recommended for mitigation.