CVE-2023-43534
Use of Out-of-range Pointer Offset in WLAN HOST
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
Corrupción de la memoria al validar el TID para el frame de solicitud de acción de Mapeo de enlaces, cuando una estación se conecta a un punto de acceso.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-09-19 CVE Reserved
- 2024-02-06 CVE Published
- 2024-02-09 EPSS Updated
- 2024-08-22 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-823: Use of Out-of-range Pointer Offset
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin | 2024-04-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Ar8035 Firmware Search vendor "Qualcomm" for product "Ar8035 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ar8035 Search vendor "Qualcomm" for product "Ar8035" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Fastconnect 6900 Firmware Search vendor "Qualcomm" for product "Fastconnect 6900 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Fastconnect 6900 Search vendor "Qualcomm" for product "Fastconnect 6900" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Fastconnect 7800 Firmware Search vendor "Qualcomm" for product "Fastconnect 7800 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Fastconnect 7800 Search vendor "Qualcomm" for product "Fastconnect 7800" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Flight Rb5 5g Platform Firmware Search vendor "Qualcomm" for product "Flight Rb5 5g Platform Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Flight Rb5 5g Platform Search vendor "Qualcomm" for product "Flight Rb5 5g Platform" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qam8255p Firmware Search vendor "Qualcomm" for product "Qam8255p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qam8255p Search vendor "Qualcomm" for product "Qam8255p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qam8650p Firmware Search vendor "Qualcomm" for product "Qam8650p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qam8650p Search vendor "Qualcomm" for product "Qam8650p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qam8775p Firmware Search vendor "Qualcomm" for product "Qam8775p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qam8775p Search vendor "Qualcomm" for product "Qam8775p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qamsrv1h Firmware Search vendor "Qualcomm" for product "Qamsrv1h Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qamsrv1h Search vendor "Qualcomm" for product "Qamsrv1h" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qamsrv1m Firmware Search vendor "Qualcomm" for product "Qamsrv1m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qamsrv1m Search vendor "Qualcomm" for product "Qamsrv1m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6391 Firmware Search vendor "Qualcomm" for product "Qca6391 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6391 Search vendor "Qualcomm" for product "Qca6391" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6554a Firmware Search vendor "Qualcomm" for product "Qca6554a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6554a Search vendor "Qualcomm" for product "Qca6554a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6564au Firmware Search vendor "Qualcomm" for product "Qca6564au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6564au Search vendor "Qualcomm" for product "Qca6564au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6574 Firmware Search vendor "Qualcomm" for product "Qca6574 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574 Search vendor "Qualcomm" for product "Qca6574" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6574a Firmware Search vendor "Qualcomm" for product "Qca6574a Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574a Search vendor "Qualcomm" for product "Qca6574a" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6574au Firmware Search vendor "Qualcomm" for product "Qca6574au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6574au Search vendor "Qualcomm" for product "Qca6574au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6584au Firmware Search vendor "Qualcomm" for product "Qca6584au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6584au Search vendor "Qualcomm" for product "Qca6584au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6595 Firmware Search vendor "Qualcomm" for product "Qca6595 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6595 Search vendor "Qualcomm" for product "Qca6595" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6595au Firmware Search vendor "Qualcomm" for product "Qca6595au Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6595au Search vendor "Qualcomm" for product "Qca6595au" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6688aq Firmware Search vendor "Qualcomm" for product "Qca6688aq Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6688aq Search vendor "Qualcomm" for product "Qca6688aq" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6696 Firmware Search vendor "Qualcomm" for product "Qca6696 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6696 Search vendor "Qualcomm" for product "Qca6696" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8081 Firmware Search vendor "Qualcomm" for product "Qca8081 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8081 Search vendor "Qualcomm" for product "Qca8081" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca8337 Firmware Search vendor "Qualcomm" for product "Qca8337 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca8337 Search vendor "Qualcomm" for product "Qca8337" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcc2073 Firmware Search vendor "Qualcomm" for product "Qcc2073 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcc2073 Search vendor "Qualcomm" for product "Qcc2073" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcc2076 Firmware Search vendor "Qualcomm" for product "Qcc2076 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcc2076 Search vendor "Qualcomm" for product "Qcc2076" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcc710 Firmware Search vendor "Qualcomm" for product "Qcc710 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcc710 Search vendor "Qualcomm" for product "Qcc710" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcm8550 Firmware Search vendor "Qualcomm" for product "Qcm8550 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcm8550 Search vendor "Qualcomm" for product "Qcm8550" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn6224 Firmware Search vendor "Qualcomm" for product "Qcn6224 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn6224 Search vendor "Qualcomm" for product "Qcn6224" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcn6274 Firmware Search vendor "Qualcomm" for product "Qcn6274 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcn6274 Search vendor "Qualcomm" for product "Qcn6274" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs7230 Firmware Search vendor "Qualcomm" for product "Qcs7230 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs7230 Search vendor "Qualcomm" for product "Qcs7230" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs8250 Firmware Search vendor "Qualcomm" for product "Qcs8250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs8250 Search vendor "Qualcomm" for product "Qcs8250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs8550 Firmware Search vendor "Qualcomm" for product "Qcs8550 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs8550 Search vendor "Qualcomm" for product "Qcs8550" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qfw7114 Firmware Search vendor "Qualcomm" for product "Qfw7114 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qfw7114 Search vendor "Qualcomm" for product "Qfw7114" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qfw7124 Firmware Search vendor "Qualcomm" for product "Qfw7124 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qfw7124 Search vendor "Qualcomm" for product "Qfw7124" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qrb5165n Firmware Search vendor "Qualcomm" for product "Qrb5165n Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qrb5165n Search vendor "Qualcomm" for product "Qrb5165n" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qualcomm Video Collaboration Vc5 Platform Firmware Search vendor "Qualcomm" for product "Qualcomm Video Collaboration Vc5 Platform Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qualcomm Video Collaboration Vc5 Platform Search vendor "Qualcomm" for product "Qualcomm Video Collaboration Vc5 Platform" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Robotics Rb5 Platform Firmware Search vendor "Qualcomm" for product "Robotics Rb5 Platform Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Robotics Rb5 Platform Search vendor "Qualcomm" for product "Robotics Rb5 Platform" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155p Firmware Search vendor "Qualcomm" for product "Sa6155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155p Search vendor "Qualcomm" for product "Sa6155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155p Firmware Search vendor "Qualcomm" for product "Sa8155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155p Search vendor "Qualcomm" for product "Sa8155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8195p Firmware Search vendor "Qualcomm" for product "Sa8195p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8195p Search vendor "Qualcomm" for product "Sa8195p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8255p Firmware Search vendor "Qualcomm" for product "Sa8255p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8255p Search vendor "Qualcomm" for product "Sa8255p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8650p Firmware Search vendor "Qualcomm" for product "Sa8650p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8650p Search vendor "Qualcomm" for product "Sa8650p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8770p Firmware Search vendor "Qualcomm" for product "Sa8770p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8770p Search vendor "Qualcomm" for product "Sa8770p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8775p Firmware Search vendor "Qualcomm" for product "Sa8775p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8775p Search vendor "Qualcomm" for product "Sa8775p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa9000p Firmware Search vendor "Qualcomm" for product "Sa9000p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa9000p Search vendor "Qualcomm" for product "Sa9000p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8550p Firmware Search vendor "Qualcomm" for product "Sm8550p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8550p Search vendor "Qualcomm" for product "Sm8550p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 8 Gen 2 Mobile Platform Firmware Search vendor "Qualcomm" for product "Snapdragon 8 Gen 2 Mobile Platform Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 8 Gen 2 Mobile Platform Search vendor "Qualcomm" for product "Snapdragon 8 Gen 2 Mobile Platform" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon 8\+ Gen 2 Mobile Platform Firmware Search vendor "Qualcomm" for product "Snapdragon 8\+ Gen 2 Mobile Platform Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon 8\+ Gen 2 Mobile Platform Search vendor "Qualcomm" for product "Snapdragon 8\+ Gen 2 Mobile Platform" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon Ar2 Gen 1 Platform Firmware Search vendor "Qualcomm" for product "Snapdragon Ar2 Gen 1 Platform Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon Ar2 Gen 1 Platform Search vendor "Qualcomm" for product "Snapdragon Ar2 Gen 1 Platform" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Snapdragon X75 5g Modem-rf System Firmware Search vendor "Qualcomm" for product "Snapdragon X75 5g Modem-rf System Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Snapdragon X75 5g Modem-rf System Search vendor "Qualcomm" for product "Snapdragon X75 5g Modem-rf System" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Srv1h Firmware Search vendor "Qualcomm" for product "Srv1h Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Srv1h Search vendor "Qualcomm" for product "Srv1h" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Srv1m Firmware Search vendor "Qualcomm" for product "Srv1m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Srv1m Search vendor "Qualcomm" for product "Srv1m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ssg2115p Firmware Search vendor "Qualcomm" for product "Ssg2115p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ssg2115p Search vendor "Qualcomm" for product "Ssg2115p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ssg2125p Firmware Search vendor "Qualcomm" for product "Ssg2125p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ssg2125p Search vendor "Qualcomm" for product "Ssg2125p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr1230p Firmware Search vendor "Qualcomm" for product "Sxr1230p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr1230p Search vendor "Qualcomm" for product "Sxr1230p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr2230p Firmware Search vendor "Qualcomm" for product "Sxr2230p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr2230p Search vendor "Qualcomm" for product "Sxr2230p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9340 Firmware Search vendor "Qualcomm" for product "Wcd9340 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9340 Search vendor "Qualcomm" for product "Wcd9340" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9380 Firmware Search vendor "Qualcomm" for product "Wcd9380 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9380 Search vendor "Qualcomm" for product "Wcd9380" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9385 Firmware Search vendor "Qualcomm" for product "Wcd9385 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9385 Search vendor "Qualcomm" for product "Wcd9385" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9390 Firmware Search vendor "Qualcomm" for product "Wcd9390 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9390 Search vendor "Qualcomm" for product "Wcd9390" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wcd9395 Firmware Search vendor "Qualcomm" for product "Wcd9395 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wcd9395 Search vendor "Qualcomm" for product "Wcd9395" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8830 Firmware Search vendor "Qualcomm" for product "Wsa8830 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8830 Search vendor "Qualcomm" for product "Wsa8830" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8832 Firmware Search vendor "Qualcomm" for product "Wsa8832 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8832 Search vendor "Qualcomm" for product "Wsa8832" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8835 Firmware Search vendor "Qualcomm" for product "Wsa8835 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8835 Search vendor "Qualcomm" for product "Wsa8835" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8840 Firmware Search vendor "Qualcomm" for product "Wsa8840 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8840 Search vendor "Qualcomm" for product "Wsa8840" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8845 Firmware Search vendor "Qualcomm" for product "Wsa8845 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8845 Search vendor "Qualcomm" for product "Wsa8845" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Wsa8845h Firmware Search vendor "Qualcomm" for product "Wsa8845h Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Wsa8845h Search vendor "Qualcomm" for product "Wsa8845h" | - | - |
Safe
|