VULNERABILITY INTELLIGENCE
CVE-2023-43513
CVSS score7.8 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2024-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Weakness classification
- product-security@qualcomm.com: CWE-823
- nvd@nist.gov: CWE-787
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory