CVE-2023-43513: qualcomm, inc. snapdragon Use of Out-of-range Pointer Offset

Vulnerability summary

CVE-2023-43513 is a high (CVSS 7.8) Use of Out-of-range Pointer Offset vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.11% chance of exploitation in the next 30 days, higher than 1.2% of scored vulnerabilities.

Timeline

1. 06-02-2024
   PublishedVulnerability first disclosed.
2. 16-06-2025
   Last modifiedVulnerability information updated.

Description

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

• CWE-823Use of Out-of-range Pointer OffsetThe product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.