Search/CVE-2023-43525
● CVE — Medium

CVE-2023-43525

VendorqualcommProductqca6574au firmware, qca6584au firmware, qca8081 firmware, sa6155p firmware, sa6145p firmware, sa6150p firmware, sa8150p firmware, ar8035 firmware, qca6696 firmware, qca8337 firmware, sa8145p firmware, qam8295p firmware, qcc710 firmware, qca6698aq firmware, qam8255p firmware, qam8650p firmware, qam8775p firmware, fastconnect 7800 firmware, qamsrv1h firmware, qcn6224 firmware, qcn6274 firmware, qfw7114 firmware, qfw7124 firmware, qamsrv1m firmware, sa7255p firmwareDiscoveredMay 6, 2024UpdatedJan 15, 2025

Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

View graph Watch Export
CVSS v3.1
6.7 MEDIUM
EPSS
0.11%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
May 6, 2024
Disclosure — published as a CVE record. · last revised by NVD Jan 15, 2025