CRITICAL🇵🇱 Wersja polska

CVE-2023-43553

CVSS 9.8v3.1pub. 2024-03-04upd. 2025-01-09

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

🤖 AI Analysis
How it works

During parsing of beacon or probe response frames sent by an access point (AP), the vulnerable code does not properly verify the number of supported links contained in the MLIE (Multi-Link Information Element). When the AP provides more such links than expected, memory corruption occurs (CWE-823 — improper use of pointer). An attacker controlling or impersonating an access point can send a specially crafted frame and trigger this error on a victim device within the wireless network range.

Impact

Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code (RCE) or cause system crash, leading to violation of confidentiality, integrity, and availability of the device.

Mitigation & patch

Patches available from the manufacturer should be applied according to the references — a detailed list of vulnerable versions and corresponding updates is available in the Qualcomm Product Security Bulletin from March 2024: https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin

Who is affected

Qualcomm AR8035 Firmware, Qualcomm CSR8811 Firmware, Qualcomm FastConnect 6900 Firmware, and other Qualcomm products indicated in the manufacturer's security bulletin from March 2024.

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Qualcomm Ar8035

    HW
    Qualcomm
    all versions

  • Qualcomm Ar8035 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Csr8811

    HW
    Qualcomm
    all versions

  • Qualcomm Csr8811 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Fastconnect 6900

    HW
    Qualcomm
    all versions

  • Qualcomm Fastconnect 6900 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Fastconnect 7800

    HW
    Qualcomm
    all versions

  • Qualcomm Fastconnect 7800 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Immersive Home 214

    HW
    Qualcomm
    all versions

  • Qualcomm Immersive Home 214 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Immersive Home 216

    HW
    Qualcomm
    all versions

  • Qualcomm Immersive Home 216 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Immersive Home 316

    HW
    Qualcomm
    all versions

  • Qualcomm Immersive Home 316 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Immersive Home 318

    HW
    Qualcomm
    all versions

  • Qualcomm Immersive Home 318 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Immersive Home 3210

    HW
    Qualcomm
    all versions

  • Qualcomm Immersive Home 3210 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Immersive Home 326

    HW
    Qualcomm
    all versions

  • Qualcomm Immersive Home 326 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Ipq5010

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq5010 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Ipq5028

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq5028 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Ipq5302

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq5302 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Ipq5312

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq5312 Firmware

    OS
    Qualcomm
    all versions

  • Qualcomm Ipq5332

    HW
    Qualcomm
    all versions

  • Qualcomm Ipq5332 Firmware

    OS
    Qualcomm
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-25289CRITICAL9.6PL ✓same product

Przepełnienie bufora stosu w NAN Service Discovery Frames — Qualcomm

CVE-2025-47372CRITICAL9.0PL ✓same product

Qualcomm: Memory Corruption przy ładowaniu uszkodzonego obrazu ELF

CVE-2025-21483CRITICAL9.8PL ✓same product

Memory corruption w Qualcomm podczas składania pakietów RTP (NALUs)

CVE-2025-27034CRITICAL9.8PL ✓same product

Qualcomm Firmware — memory corruption przy wyborze PLMN z listy SOR

CVE-2025-21450CRITICAL9.1PL ✓same product

Qualcomm: podatność kryptograficzna umożliwiająca Auth Bypass podczas pobierania