Skip to content
OpenAdvisories
Critical · 9.3 CVE-2023-43538 EUVD-2023-47944GHSA-m5g4-gchp-vpxf

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Published Jun 3, 2024 · Updated Aug 2, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, AR8035, FastConnect 6200, FastConnect 6800, FastConnect 6900, FastConnect 7800, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA6174A, QCA6310, QCA6335, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595A… —

Advisories 2

References