CVE-2023-43543 - Vulnerability Details

Vendors	Products
Qualcomm	Qam8255p Qam8255p Firmware Qam8775p Qam8775p Firmware Qca6584au Qca6584au Firmware Qca6698aq Qca6698aq Firmware Sa8255p Sa8255p Firmware Sa8770p Sa8770p Firmware Sa8775p Sa8775p Firmware Sa9000p Sa9000p Firmware Snapdragon Auto 5g Modem-rf Gen 2 Snapdragon Auto 5g Modem-rf Gen 2 Firmware Snapdragon W5\+ Gen 1 Wearable Snapdragon W5\+ Gen 1 Wearable Firmware Sw5100 Sw5100 Firmware Sw5100p Sw5100p Firmware Wcn3980 Wcn3980 Firmware Wcn3988 Wcn3988 Firmware Wsa8830 Wsa8830 Firmware Wsa8835 Wsa8835 Firmware

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-43543", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2023-09-19T14:48:15.093Z", "datePublished": "2024-06-03T10:05:17.132Z", "dateUpdated": "2024-08-02T19:44:43.789Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Auto", "Snapdragon Wearables"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8775P"}, {"status": "affected", "version": "QCA6584AU"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA8775P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2"}, {"status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform"}, {"status": "affected", "version": "SW5100"}, {"status": "affected", "version": "SW5100P"}, {"status": "affected", "version": "WCN3980"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8835"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE-416 Use After Free", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-06-03T10:05:17.132Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html"}], "title": "Use After Free in Audio"}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-43543", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-03T16:36:13.988433Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qca6584au_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qca6698aq_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8770p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa9000p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "snapdragon_auto_5g_modem-rf_gen_2_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sw5100_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sw5100p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wcn3980_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wcn3988_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wsa8830_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wsa8835_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "snapdragon_w5\\+_gen_1_wearable_platform_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:25:54.520Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:44:43.789Z"}, "title": "CVE Program Container", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-43543 (string)

assignerOrgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

state : PUBLISHED (string)

assignerShortName : qualcomm (string)

dateReserved : 2023-09-19T14:48:15.093Z (string)

datePublished : 2024-06-03T10:05:17.132Z (string)

dateUpdated : 2024-08-02T19:44:43.789Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

platforms : [ »

0 : Snapdragon Auto (string)

1 : Snapdragon Wearables (string)

]

product : Snapdragon (string)

vendor : Qualcomm, Inc. (string)

versions : [ »

0 : { »

status : affected (string)

version : QAM8255P (string)

}

1 : { »

status : affected (string)

version : QAM8775P (string)

}

2 : { »

status : affected (string)

version : QCA6584AU (string)

}

3 : { »

status : affected (string)

version : QCA6698AQ (string)

}

4 : { »

status : affected (string)

version : SA8255P (string)

}

5 : { »

status : affected (string)

version : SA8770P (string)

}

6 : { »

status : affected (string)

version : SA8775P (string)

}

7 : { »

status : affected (string)

version : SA9000P (string)

}

8 : { »

status : affected (string)

version : Snapdragon Auto 5G Modem-RF Gen 2 (string)

}

9 : { »

status : affected (string)

version : Snapdragon W5+ Gen 1 Wearable Platform (string)

}

10 : { »

status : affected (string)

version : SW5100 (string)

}

11 : { »

status : affected (string)

version : SW5100P (string)

}

12 : { »

status : affected (string)

version : WCN3980 (string)

}

13 : { »

status : affected (string)

version : WCN3988 (string)

}

14 : { »

status : affected (string)

version : WSA8830 (string)

}

15 : { »

status : affected (string)

version : WSA8835 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-416 (string)

description : CWE-416 Use After Free (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

shortName : qualcomm (string)

dateUpdated : 2024-06-03T10:05:17.132Z (string)

}

references : [ »

0 : { »

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html (string)

}

]

title : Use After Free in Audio (string)

}

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-43543 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-06-03T16:36:13.988433Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qam8255p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qam8775p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qca6584au_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qca6698aq_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa8255p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa8770p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa8775p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa9000p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : snapdragon_auto_5g_modem-rf_gen_2_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sw5100_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sw5100p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wcn3980_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wcn3988_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wsa8830_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wsa8835_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : snapdragon_w5\+_gen_1_wearable_platform_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-04T17:25:54.520Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T19:44:43.789Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:44:43.789Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-43543", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-03T16:36:13.988433Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qca6584au_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qca6698aq_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8770p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa9000p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "snapdragon_auto_5g_modem-rf_gen_2_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sw5100_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sw5100p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wcn3980_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wcn3988_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wsa8830_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "wsa8835_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "snapdragon_w5\\+_gen_1_wearable_platform_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T16:36:21.896Z"}}], "cna": {"title": "Use After Free in Audio", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8775P"}, {"status": "affected", "version": "QCA6584AU"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA8775P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2"}, {"status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform"}, {"status": "affected", "version": "SW5100"}, {"status": "affected", "version": "SW5100P"}, {"status": "affected", "version": "WCN3980"}, {"status": "affected", "version": "WCN3988"}, {"status": "affected", "version": "WSA8830"}, {"status": "affected", "version": "WSA8835"}], "platforms": ["Snapdragon Auto", "Snapdragon Wearables"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-06-03T10:05:17.132Z"}}}, "cveMetadata": {"cveId": "CVE-2023-43543", "state": "PUBLISHED", "dateUpdated": "2024-08-02T19:44:43.789Z", "dateReserved": "2023-09-19T14:48:15.093Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2024-06-03T10:05:17.132Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T19:44:43.789Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-43543 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-06-03T16:36:13.988433Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qam8255p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qam8775p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qca6584au_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : qca6698aq_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa8255p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa8770p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa8775p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sa9000p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : snapdragon_auto_5g_modem-rf_gen_2_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sw5100_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : sw5100p_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wcn3980_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wcn3988_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wsa8830_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : wsa8835_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:* (string)

]

vendor : qualcomm (string)

product : snapdragon_w5\+_gen_1_wearable_platform_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : * (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-03T16:36:21.896Z (string)

}

]

cna : { »

title : Use After Free in Audio (string)

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.7 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Qualcomm, Inc. (string)

product : Snapdragon (string)

versions : [ »

0 : { »

status : affected (string)

version : QAM8255P (string)

}

1 : { »

status : affected (string)

version : QAM8775P (string)

}

2 : { »

status : affected (string)

version : QCA6584AU (string)

}

3 : { »

status : affected (string)

version : QCA6698AQ (string)

}

4 : { »

status : affected (string)

version : SA8255P (string)

}

5 : { »

status : affected (string)

version : SA8770P (string)

}

6 : { »

status : affected (string)

version : SA8775P (string)

}

7 : { »

status : affected (string)

version : SA9000P (string)

}

8 : { »

status : affected (string)

version : Snapdragon Auto 5G Modem-RF Gen 2 (string)

}

9 : { »

status : affected (string)

version : Snapdragon W5+ Gen 1 Wearable Platform (string)

}

10 : { »

status : affected (string)

version : SW5100 (string)

}

11 : { »

status : affected (string)

version : SW5100P (string)

}

12 : { »

status : affected (string)

version : WCN3980 (string)

}

13 : { »

status : affected (string)

version : WCN3988 (string)

}

14 : { »

status : affected (string)

version : WSA8830 (string)

}

15 : { »

status : affected (string)

version : WSA8835 (string)

}

]

platforms : [ »

0 : Snapdragon Auto (string)

1 : Snapdragon Wearables (string)

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : CWE-416 Use After Free (string)

}

]

}

]

providerMetadata : { »

orgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

shortName : qualcomm (string)

dateUpdated : 2024-06-03T10:05:17.132Z (string)

}

cveMetadata : { »

cveId : CVE-2023-43543 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-02T19:44:43.789Z (string)

dateReserved : 2023-09-19T14:48:15.093Z (string)

assignerOrgId : 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f (string)

datePublished : 2024-06-03T10:05:17.132Z (string)

assignerShortName : qualcomm (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3723C7B1-A7E2-401F-8D6D-189350F6BCA5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*", "matchCriteriaId": "B12B89EF-7B12-481E-BCBC-F12B9D16321A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "49B2DF91-BE6B-4E9E-B63C-98DADD29AD6B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*", "matchCriteriaId": "58170126-928F-4AE5-B5AF-5ED4710F9BA2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C3DDA896-576C-44B8-85B6-F71F473F776B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*", "matchCriteriaId": "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3F7853D-09EE-476F-B48D-BB30AEB4A67D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC6E268D-C4AF-4950-9223-39EA36D538A8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*", "matchCriteriaId": "073C1A81-D02B-4F2F-9378-CD1B2DCE0E5B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "781CCC31-C08F-499B-BE73-6C7DB70437AF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*", "matchCriteriaId": "75AFAA21-0589-4C6A-9418-34EE8A61BBAD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C79595B-1259-4431-96F9-C5A24E624305", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F2F3431-9CD7-4D4F-833D-DD4D3ACF94C7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A024AB04-B213-4018-A4C1-FA467C7BA775", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2A8AB7C-5D34-4794-8C06-2193075B323F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE5FCA7F-1FBE-42AA-B4E6-09CEA02A33EC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2D789BC-43F5-40FB-A191-163C01BA5FBE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A0F761E3-62F7-4A70-A3CA-09FF283ABD9C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_w5\\+_gen_1_wearable:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6136853-B719-4DA2-B6C9-C9E8EF02B35A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*", "matchCriteriaId": "7B8455D6-287D-4934-8E4D-F4127A9C0449", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB599A9F-0305-4FE4-8623-0F86630FEDCB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9C6E9038-9B18-4958-BE1E-215901C9B4B2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*", "matchCriteriaId": "B36D3274-F8D0-49C5-A6D5-95F5DC6D1950", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4BFB25F-013B-48E3-99FF-3E8687F94423", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF676C5B-838B-446C-A689-6A25AB8A87E2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object."}, {"lang": "es", "value": "Corrupci\u00f3n de la memoria en audio durante una reproducci\u00f3n o grabaci\u00f3n debido a la condici\u00f3n de ejecuci\u00f3n entre la asignaci\u00f3n y desasignaci\u00f3n del objeto gr\u00e1fico."}], "id": "CVE-2023-43543", "lastModified": "2025-01-27T19:40:35.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "product-security@qualcomm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-06-03T10:15:10.467", "references": [{"source": "product-security@qualcomm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html"}], "sourceIdentifier": "product-security@qualcomm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "product-security@qualcomm.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3723C7B1-A7E2-401F-8D6D-189350F6BCA5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B12B89EF-7B12-481E-BCBC-F12B9D16321A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 49B2DF91-BE6B-4E9E-B63C-98DADD29AD6B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 58170126-928F-4AE5-B5AF-5ED4710F9BA2 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C3DDA896-576C-44B8-85B6-F71F473F776B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 51A87BDA-5B24-4212-BAB3-D2BBB2F4162E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B3F7853D-09EE-476F-B48D-BB30AEB4A67D (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EC6E268D-C4AF-4950-9223-39EA36D538A8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 073C1A81-D02B-4F2F-9378-CD1B2DCE0E5B (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 781CCC31-C08F-499B-BE73-6C7DB70437AF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 75AFAA21-0589-4C6A-9418-34EE8A61BBAD (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C79595B-1259-4431-96F9-C5A24E624305 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F2F3431-9CD7-4D4F-833D-DD4D3ACF94C7 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

7 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A024AB04-B213-4018-A4C1-FA467C7BA775 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A2A8AB7C-5D34-4794-8C06-2193075B323F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

8 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EE5FCA7F-1FBE-42AA-B4E6-09CEA02A33EC (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E2D789BC-43F5-40FB-A191-163C01BA5FBE (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

9 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A0F761E3-62F7-4A70-A3CA-09FF283ABD9C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F6136853-B719-4DA2-B6C9-C9E8EF02B35A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

10 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B8455D6-287D-4934-8E4D-F4127A9C0449 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

11 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DB599A9F-0305-4FE4-8623-0F86630FEDCB (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EEB883BF-68B2-4C25-84DC-5DA953BFAA2F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

12 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9C6E9038-9B18-4958-BE1E-215901C9B4B2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B36D3274-F8D0-49C5-A6D5-95F5DC6D1950 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

13 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E4BFB25F-013B-48E3-99FF-3E8687F94423 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF676C5B-838B-446C-A689-6A25AB8A87E2 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

14 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11B69595-E488-4590-A150-CE5BE08B5E13 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF680174-5FA6-47D9-8EAB-CC2A37A7BD42 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

15 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F80BC68E-7476-4A40-9F48-53722FE9A5BF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B36F4B2-BAA3-45AD-9967-0EB482C99708 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. (string)

}

1 : { »

lang : es (string)

value : Corrupción de la memoria en audio durante una reproducción o grabación debido a la condición de ejecución entre la asignación y desasignación del objeto gráfico. (string)

}

]

id : CVE-2023-43543 (string)

lastModified : 2025-01-27T19:40:35.657 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : product-security@qualcomm.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-06-03T10:15:10.467 (string)

references : [ »

0 : { »

source : product-security@qualcomm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html (string)

}

]

sourceIdentifier : product-security@qualcomm.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : product-security@qualcomm.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm qam8255p Qualcomm qam8255p Firmware Qualcomm qam8775p Qualcomm qam8775p Firmware Qualcomm qca6584au Qualcomm qca6584au Firmware Qualcomm qca6698aq Qualcomm qca6698aq Firmware Qualcomm sa8255p Qualcomm sa8255p Firmware Qualcomm sa8770p Qualcomm sa8770p Firmware Qualcomm sa8775p Qualcomm sa8775p Firmware Qualcomm sa9000p Qualcomm sa9000p Firmware Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware Qualcomm snapdragon W5\+ Gen 1 Wearable Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware Qualcomm sw5100 Qualcomm sw5100 Firmware Qualcomm sw5100p Qualcomm sw5100p Firmware Qualcomm wcn3980 Qualcomm wcn3980 Firmware Qualcomm wcn3988 Qualcomm wcn3988 Firmware Qualcomm wsa8830 Qualcomm wsa8830 Firmware Qualcomm wsa8835 Qualcomm wsa8835 Firmware
CPEs		cpe:2.3:h:qualcomm:qam8255p:-:::::::* cpe:2.3:h:qualcomm:qam8775p:-:::::::* cpe:2.3:h:qualcomm:qca6584au:-:::::::* cpe:2.3:h:qualcomm:qca6698aq:-:::::::* cpe:2.3:h:qualcomm:sa8255p:-:::::::* cpe:2.3:h:qualcomm:sa8770p:-:::::::* cpe:2.3:h:qualcomm:sa8775p:-:::::::* cpe:2.3:h:qualcomm:sa9000p:-:::::::* cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:::::::* cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:::::::* cpe:2.3:h:qualcomm:sw5100:-:::::::* cpe:2.3:h:qualcomm:sw5100p:-:::::::* cpe:2.3:h:qualcomm:wcn3980:-:::::::* cpe:2.3:h:qualcomm:wcn3988:-:::::::* cpe:2.3:h:qualcomm:wsa8830:-:::::::* cpe:2.3:h:qualcomm:wsa8835:-:::::::* cpe:2.3:o:qualcomm:qam8255p_firmware:-:::::::* cpe:2.3:o:qualcomm:qam8775p_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6584au_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6698aq_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8255p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8770p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa8775p_firmware:-:::::::* cpe:2.3:o:qualcomm:sa9000p_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:::::::* cpe:2.3:o:qualcomm:sw5100_firmware:-:::::::* cpe:2.3:o:qualcomm:sw5100p_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn3980_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn3988_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*
Vendors & Products		Qualcomm Qualcomm qam8255p Qualcomm qam8255p Firmware Qualcomm qam8775p Qualcomm qam8775p Firmware Qualcomm qca6584au Qualcomm qca6584au Firmware Qualcomm qca6698aq Qualcomm qca6698aq Firmware Qualcomm sa8255p Qualcomm sa8255p Firmware Qualcomm sa8770p Qualcomm sa8770p Firmware Qualcomm sa8775p Qualcomm sa8775p Firmware Qualcomm sa9000p Qualcomm sa9000p Firmware Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware Qualcomm snapdragon W5\+ Gen 1 Wearable Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware Qualcomm sw5100 Qualcomm sw5100 Firmware Qualcomm sw5100p Qualcomm sw5100p Firmware Qualcomm wcn3980 Qualcomm wcn3980 Firmware Qualcomm wcn3988 Qualcomm wcn3988 Firmware Qualcomm wsa8830 Qualcomm wsa8830 Firmware Qualcomm wsa8835 Qualcomm wsa8835 Firmware

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object