ZeroHour

CVE-2023-21639

CVSS 3.1
7.8 high
EPSS
<1%p2
Published
()
Modified
Description

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Vendors
qualcomm
Products
aqt1000 firmware, fastconnect 6200 firmware, qca6420 firmware, qca6430 firmware, sa4150p firmware, sa4155p firmware, sa6155p firmware, sa8155p firmware, sa8195p firmware, sd855 firmware, snapdragon 855 firmware, snapdragon 855\+\/860 firmware
Weakness
CWE-120, CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.