Vulnerability Description
Memory corruption due to untrusted pointer dereference in automotive during system call.
CVSS Score
9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Apq8064Au Firmware | - |
| Qualcomm | Apq8064Au | - |
| Qualcomm | Apq8096Au Firmware | - |
| Qualcomm | Apq8096Au | - |
| Qualcomm | Msm8996Au Firmware | - |
| Qualcomm | Msm8996Au | - |
| Qualcomm | Qam8295P Firmware | - |
| Qualcomm | Qam8295P | - |
| Qualcomm | Qca6564A Firmware | - |
| Qualcomm | Qca6564A | - |
| Qualcomm | Qca6564Au Firmware | - |
| Qualcomm | Qca6564Au | - |
| Qualcomm | Qca6574A Firmware | - |
| Qualcomm | Qca6574A | - |
| Qualcomm | Qca6574Au Firmware | - |
| Qualcomm | Qca6574Au | - |
| Qualcomm | Qca6584Au Firmware | - |
| Qualcomm | Qca6584Au | - |
| Qualcomm | Qca6595 Firmware | - |
| Qualcomm | Qca6595 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletinVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletinVendor Advisory
FAQ
What is CVE-2023-21643?
CVE-2023-21643 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Memory corruption due to untrusted pointer dereference in automotive during system call.
How severe is CVE-2023-21643?
CVE-2023-21643 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-21643?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8064Au Firmware, Qualcomm Apq8064Au, Qualcomm Apq8096Au Firmware, Qualcomm Apq8096Au, Qualcomm Msm8996Au Firmware.