← CVE Intelligence

CVE-2023-21639

Buffer Copy Without Checking the Size of Input in Audio PUBLISHED

Description (CNA)

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Affected (CNA)

Vendor / productVersions
Qualcomm, Inc. / Snapdragonaffected AQT1000; affected FastConnect 6200; affected QCA6420; affected QCA6430; affected SA4150P; affected SA4155P; affected SA6155P; affected SA8155P; affected SA8195P; affected SD855; affected Snapdragon 855 Mobile Platform; affected Snapdragon 855+/860 Mobile Platform (SM8150-AC); affected Snapdragon W5+ Gen 1 Wearable Platform; affected SW5100; affected SW5100P; affected WCD9341; affected WCN3980; affected WCN3988; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

CWE

CWE-120

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.