Skip to content
OpenAdvisories
High · 8.4 CVE-2023-43540 EUVD-2023-47946GHSA-6299-m9xc-vxvj

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Published Mar 4, 2024 · Updated Aug 2, 2024 · Assigned by qualcomm

Description

Memory corruption while processing the IOCTL FM HCI WRITE request.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, QCA6391, QCA6420, QCA6430, SC8380XP, SM6250, Snapdragon 7c Compute Platform (SC7180-AC), Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro", Snapdragon 7c+ Gen 3 Compute, Snapdragon 8c Com… —

References