Search/CVE-2023-43524
● CVE — Medium

CVE-2023-43524

VendorqualcommProductqca6574au firmware, qca6584au firmware, qca9377 firmware, qca8081 firmware, ar8035 firmware, qca6391 firmware, qca6426 firmware, qca6436 firmware, qca6696 firmware, qca9367 firmware, qca8337 firmware, qam8295p firmware, qcc710 firmware, qca6698aq firmware, qam8255p firmware, qam8650p firmware, qam8775p firmware, fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware, qamsrv1h firmware, qcn6224 firmware, qcn6274 firmware, qfw7114 firmware, qamsrv1m firmwareDiscoveredMay 6, 2024UpdatedJan 15, 2025

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

View graph Watch Export
CVSS v3.1
6.7 MEDIUM
EPSS
0.11%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
May 6, 2024
Disclosure — published as a CVE record. · last revised by NVD Jan 15, 2025