Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-21639

Buffer Copy Without Checking the Size of Input in Audio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • AQT1000affected
  • FastConnect 6200affected
  • QCA6420affected
  • QCA6430affected
  • SA4150Paffected
  • SA4155Paffected
  • SA6155Paffected
  • SA8155Paffected
  • SA8195Paffected
  • SD855affected
  • Snapdragon 855 Mobile Platformaffected
  • Snapdragon 855+/860 Mobile Platform (SM8150-AC)affected
  • Snapdragon W5+ Gen 1 Wearable Platformaffected
  • SW5100affected
  • SW5100Paffected
  • WCD9341affected
  • WCN3980affected
  • WCN3988affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8835affected

References