CVE-2023-43553: Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43553?
The severity of CVE-2023-43553 is classified as high due to the potential for memory corruption vulnerabilities.
How do I fix CVE-2023-43553?
To fix CVE-2023-43553, ensure that your affected software is updated to the latest version provided by your vendor.
What affected software is vulnerable to CVE-2023-43553?
CVE-2023-43553 affects various Qualcomm firmware including the AR8035, CSR8811, and multiple FastConnect models.
Is my Android device susceptible to CVE-2023-43553?
Yes, CVE-2023-43553 may impact Android devices that use Qualcomm chipsets vulnerable to this memory corruption issue.
What are the potential impacts of CVE-2023-43553?
The potential impacts of CVE-2023-43553 include system instability and a possible remote code execution vulnerability.