What’s Vulnerable › Vulnerabilities

CVE-2023-43520: Stack-based Buffer Overflow in WLAN HOST

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-06 · updated 2026-06-17
Weakness: CWE-121

Description

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Affected products

Qualcomm Ar8035 Firmware: all versions
Qualcomm Fastconnect 6900 Firmware: all versions
Qualcomm Fastconnect 7800 Firmware: all versions
Qualcomm Flight Rb5 5G Platform Firmware: all versions
Qualcomm Qam8255P Firmware: all versions
Qualcomm Qam8650P Firmware: all versions
Qualcomm Qam8775P Firmware: all versions
Qualcomm Qamsrv1H Firmware: all versions
Qualcomm Qamsrv1M Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6554A Firmware: all versions
Qualcomm Qca6564Au Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6584Au Firmware: all versions
Qualcomm Qca6595 Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6688Aq Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca8081 Firmware: all versions
Qualcomm Qca8337 Firmware: all versions
Qualcomm Qcc2073 Firmware: all versions
Qualcomm Qcc2076 Firmware: all versions
Qualcomm Qcc710 Firmware: all versions
Qualcomm Qcm8550 Firmware: all versions
Qualcomm Qcn6224 Firmware: all versions
Qualcomm Qcn6274 Firmware: all versions
Qualcomm Qcs7230 Firmware: all versions
Qualcomm Qcs8250 Firmware: all versions

References

Get alerted when CVE-2023-43520 or the next vulnerability affects your stack