CVE-2023-43552: Use After Free in WLAN Host Communication
Memory corruption while processing MBSSID beacon containing several subelement IE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43552?
CVE-2023-43552 is classified as a high-severity vulnerability due to potential memory corruption issues.
How do I fix CVE-2023-43552?
To mitigate CVE-2023-43552, update affected Qualcomm firmware or disable the affected features until an update can be applied.
What systems are affected by CVE-2023-43552?
CVE-2023-43552 affects various Qualcomm firmware versions across several products, including certain Android devices.
What kind of vulnerability is CVE-2023-43552?
CVE-2023-43552 is a memory corruption vulnerability that may lead to crashes or arbitrary code execution.
When was CVE-2023-43552 disclosed?
CVE-2023-43552 was disclosed as part of Qualcomm's March 2024 product security bulletin.