CVE-2023-43525 - CVE House
Back to Database
Status published Medium CVE-2023-43525

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Vulnerability Description

Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-43525

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Qualcomm, Inc.

View all reports →

Affected Software

Snapdragon
Vulnerable Versions:
AR8035, FastConnect 7800, QAM8255P, QAM8295P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6574AU, QCA6584AU, QCA6696, QCA6698AQ, QCA8081, QCA8337, QCC710, QCN6224, QCN6274, QFW7114, QFW7124, SA6145P, SA6150P, SA6155P, SA7255P, SA8145P, SA8150P, SA8155P, SA8195P, SA8255P, SA8295P, SA8620P, SA8650P, SA8770P, SA8775P, SA9000P, Snapdragon Auto 5G Modem-RF Gen 2, Snapdragon X72 5G Modem-RF System, Snapdragon X75 5G Modem-RF System, SRV1H, SRV1M, WCD9340

Timeline

Official Publish: May 6th, 2024
Last Modified: December 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)