Skip to content
OpenAdvisories
High · 7.8 CVE-2023-43542 EUVD-2023-47948GHSA-p555-252p-vf5r

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Published Jun 3, 2024 · Updated Aug 13, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 9205 LTE Modem, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, FSM10056, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QCA4004, QCA6174A, QCA6310, QCA6335, QCA6391, QCA6420, QCA6421, QCA6426, Q… —

Advisories 2

References