Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-43524 EUVD-2023-47930GHSA-33jm-jx25-33gx

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Published May 6, 2024 · Updated Aug 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, FastConnect 6800, FastConnect 6900, FastConnect 7800, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6391, QCA6426, QCA6436, QCA6574AU, QCA6584AU, QCA6696, QCA6698AQ, QCA8081, QCA8337, QCA9367, QCA9377, QCC710, QCN6224, QCN6274, QFW7114, QFW7124, SA6145P, SA6150P, SA6155P, S… —

Advisories 1

References