CVE-2023-43527
MEDIUMDescription
Information disclosure while parsing dts header atom in Video.
Is your site exposed to CVE-2023-43527?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | fastconnect_6800_firmware |
| qualcomm | fastconnect_6800 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | qam8295p_firmware |
| qualcomm | qam8295p |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6426_firmware |
| qualcomm | qca6426 |
| qualcomm | qca6436_firmware |
| qualcomm | qca6436 |
| qualcomm | qca6574au_firmware |
| qualcomm | qca6574au |
| qualcomm | qca6696_firmware |
| qualcomm | qca6696 |
| qualcomm | qcn9074_firmware |
| qualcomm | qcn9074 |
| qualcomm | qcs410_firmware |
| qualcomm | qcs410 |
| qualcomm | qcs610_firmware |
| qualcomm | qcs610 |
| qualcomm | video_collaboration_vc1_platform_firmware |
| qualcomm | video_collaboration_vc1_platform |
| qualcomm | video_collaboration_vc3_platform_firmware |
| qualcomm | video_collaboration_vc3_platform |
| qualcomm | sa6145p_firmware |
| qualcomm | sa6145p |
| qualcomm | sa6150p_firmware |
| qualcomm | sa6150p |
| qualcomm | sa6155p_firmware |
| qualcomm | sa6155p |
| qualcomm | sa8145p_firmware |
| qualcomm | sa8145p |
| qualcomm | sa8150p_firmware |
| qualcomm | sa8150p |
| qualcomm | sa8155p_firmware |
| qualcomm | sa8155p |
| qualcomm | sa8195p_firmware |
| qualcomm | sa8195p |
| qualcomm | sa8295p_firmware |
| qualcomm | sa8295p |
| qualcomm | sd660_firmware |
| qualcomm | sd660 |
| qualcomm | sd865_5g_firmware |
| qualcomm | sd865_5g |
| qualcomm | sdm429w_firmware |
| qualcomm | sdm429w |
| qualcomm | snapdragon_429_mobile_firmware |
| qualcomm | snapdragon_429_mobile |
| qualcomm | snapdragon_660_mobile_firmware |
| qualcomm | snapdragon_660_mobile |
| qualcomm | snapdragon_8_gen_1_mobile_firmware |
| qualcomm | snapdragon_8_gen_1_mobile |
| qualcomm | snapdragon_865_5g_mobile_firmware |
| qualcomm | snapdragon_865_5g_mobile |
| qualcomm | snapdragon_865\+_5g_mobile_firmware |
| qualcomm | snapdragon_865\+_5g_mobile |
| qualcomm | snapdragon_870_5g_mobile_firmware |
| qualcomm | snapdragon_870_5g_mobile |
| qualcomm | snapdragon_w5\+_gen_1_wearable_firmware |
| qualcomm | snapdragon_w5\+_gen_1_wearable |
| qualcomm | snapdragon_wear_4100\+_firmware |
| qualcomm | snapdragon_wear_4100\+ |
| qualcomm | snapdragon_x55_5g_modem-rf_firmware |
| qualcomm | snapdragon_x55_5g_modem-rf |
| qualcomm | snapdragon_xr2_5g_firmware |
| qualcomm | snapdragon_xr2_5g |
| qualcomm | sw5100_firmware |
| qualcomm | sw5100 |
| qualcomm | sw5100p_firmware |
| qualcomm | sw5100p |
| qualcomm | sxr2130_firmware |
| qualcomm | sxr2130 |
| qualcomm | wcd9335_firmware |
| qualcomm | wcd9335 |
| qualcomm | wcd9341_firmware |
| qualcomm | wcd9341 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcn3610_firmware |
| qualcomm | wcn3610 |
| qualcomm | wcn3620_firmware |
| qualcomm | wcn3620 |
| qualcomm | wcn3660b_firmware |
| qualcomm | wcn3660b |
| qualcomm | wcn3680b_firmware |
| qualcomm | wcn3680b |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn3990_firmware |
| qualcomm | wcn3990 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
References
Frequently Asked Questions
What is CVE-2023-43527? +
How severe is CVE-2023-43527? +
What products are affected by CVE-2023-43527? +
How do I check if I'm vulnerable to CVE-2023-43527? +
Related Vulnerabilities
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet …
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, …
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the …
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain …