CVE-2023-43544
HIGHCVSS 7.8/10EPSS 0.10%
Last modified
CVE-2023-43544 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Qam8255p Firmware | All versions |
| Qualcomm | Qam8775p Firmware | All versions |
| Qualcomm | Qca6584au Firmware | All versions |
| Qualcomm | Qca6698aq Firmware | All versions |
| Qualcomm | Qca8081 Firmware | All versions |
| Qualcomm | Qca8337 Firmware | All versions |
| Qualcomm | Qcc710 Firmware | All versions |
| Qualcomm | Qcn6224 Firmware | All versions |
| Qualcomm | Qcn6274 Firmware | All versions |
| Qualcomm | Qfw7114 Firmware | All versions |
| Qualcomm | Qfw7124 Firmware | All versions |
| Qualcomm | Sa8255p Firmware | All versions |
| Qualcomm | Sa8770p Firmware | All versions |
| Qualcomm | Sa8775p Firmware | All versions |
| Qualcomm | Sa9000p Firmware | All versions |
| Qualcomm | Snapdragon Auto 5g Modem-Rf Gen 2 Firmware | All versions |
| Qualcomm | Snapdragon W5\+ Gen 1 Wearable Firmware | All versions |
| Qualcomm | Snapdragon X75 5g Modem-Rf Firmware | All versions |
| Qualcomm | Sw5100 Firmware | All versions |
| Qualcomm | Sw5100p Firmware | All versions |
| Qualcomm | Wcd9340 Firmware | All versions |
| Qualcomm | Wcn3980 Firmware | All versions |
| Qualcomm | Wcn3988 Firmware | All versions |
| Qualcomm | Wsa8830 Firmware | All versions |
| Qualcomm | Wsa8835 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-43544?
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
How severe is CVE-2023-43544?
CVE-2023-43544 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.10% probability of exploitation in the next 30 days.
How do I fix CVE-2023-43544?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-43539Transient DOS while processing an improperly formatted 802.1…7.5
- CVE-2023-4354Heap buffer overflow in Skia in Google Chrome prior to 116.0…8.8
- CVE-2023-43540Memory corruption while processing the IOCTL FM HCI WRITE re…7.8
- CVE-2023-43541Memory corruption while invoking the SubmitCommands call on …7.8
- CVE-2023-43542Memory corruption while copying a keyblob`s material when th…7.8
- CVE-2023-43543Memory corruption in Audio during a playback or a recording …7
- CVE-2023-43545Memory corruption when more scan frequency list or channels …7.8
- CVE-2023-43546Memory corruption while invoking HGSL IOCTL context create.7.8
- CVE-2023-43547Memory corruption while invoking IOCTLs calls in Automotive …7.8
- CVE-2023-43548Memory corruption while parsing qcp clip with invalid chunk …9.8
- CVE-2023-43549Memory corruption while processing TPC target power table in…7.8
- CVE-2023-4355Out of bounds memory access in V8 in Google Chrome prior to …8.8
Are you affected by CVE-2023-43544?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST