VulnerabilityAnalyzed
CVE-2023-43528
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
MEDIUM 5.5EPSS 0.11%
Does this matter?
Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.
Description
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.11% probability · 1th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-126, CWE-125
- Affected
- qualcomm/ar8035 firmware · qualcomm/c-v2x 9150 firmware · qualcomm/csrb31024 firmware · qualcomm/fastconnect 6800 firmware · qualcomm/fastconnect 6900 firmware · qualcomm/fastconnect 7800 firmware · qualcomm/msm8996au firmware · qualcomm/qam8255p firmware · qualcomm/qam8295p firmware · qualcomm/qam8650p firmware · qualcomm/qam8775p firmware · qualcomm/qamsrv1h firmware · qualcomm/qamsrv1m firmware · qualcomm/qca6310 firmware · qualcomm/qca6320 firmware · qualcomm/qca6391 firmware · qualcomm/qca6426 firmware · qualcomm/qca6436 firmware · qualcomm/qca6564a firmware · qualcomm/qca6564au firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.