CVE-2023-43513— Use of Out-of-range Pointer Offset in PCIe
Quick assessment
Affected
Qualcomm, Inc. Snapdragon
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Qualcomm Chipsets是美国高通（Qualcomm）公司的一系列芯片组。 Qualcomm Chipsets 存在安全漏洞，该漏洞源于处理事件环时内存损坏，上下文读取指针不受 HLOS 信任，并且当它传递任意值时，可能会指向环元素中间的地址。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-43513
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Use of Out-of-range Pointer Offset in PCIe
Source: CVE Program / CVE List V5
Vulnerability Description
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用越界的指针偏移
Source: CVE Program / CVE List V5
Vulnerability Title
Qualcomm Chipsets 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Qualcomm Chipsets是美国高通（Qualcomm）公司的一系列芯片组。 Qualcomm Chipsets 存在安全漏洞，该漏洞源于处理事件环时内存损坏，上下文读取指针不受 HLOS 信任，并且当它传递任意值时，可能会指向环元素中间的地址。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | 315 5G IoT Modem | - |
|
II. Public POCs for CVE-2023-43513
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-43513
请登录查看更多情报信息。
Other References for CVE-2023-43513 (1)
Same Patch Batch · Qualcomm, Inc. · 2024-02-06 · 26 CVEs total
| CVE-2023-33072 | 9.3 CRITICAL | Buffer copy without checking size of Input in Core |
| CVE-2023-43534 | 8.6 HIGH | Use of Out-of-range Pointer Offset in WLAN HOST |
| CVE-2023-43520 | 8.6 HIGH | Stack-based Buffer Overflow in WLAN HOST |
| CVE-2023-43535 | 8.4 HIGH | Improper Validation of Array Index in Display |
| CVE-2023-43532 | 8.4 HIGH | Untrusted Pointer Dereference in Display |
| CVE-2023-43517 | 8.4 HIGH | Improper Access Control in Automotive Multimedia |
| CVE-2023-33058 | 8.2 HIGH | Buffer Copy Without Checking Size of Input in Modem |
| CVE-2023-33046 | 7.8 HIGH | Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment |
| CVE-2023-43516 | 7.8 HIGH | Use of out-of-range pointer offset in Video |
| CVE-2023-43522 | 7.5 HIGH | NULL Pointer Dereference in WLAN Firmware |
| CVE-2023-43523 | 7.5 HIGH | Reachable Assertion in WLAN Firmware |
| CVE-2023-43533 | 7.5 HIGH | Buffer Over-read in WLAN Firmware |
| CVE-2023-33057 | 7.5 HIGH | Improper Input Validation in Multi-Mode Call Processor |
| CVE-2023-33049 | 7.5 HIGH | Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor |
| CVE-2023-43536 | 7.5 HIGH | Buffer Over-read in WLAN Firmware |
| CVE-2023-43518 | 7.3 HIGH | Untrusted Pointer Dereference in Video |
| CVE-2023-43519 | 7.3 HIGH | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video |
| CVE-2023-33060 | 7.1 HIGH | Buffer Over-read in Core |
| CVE-2023-33077 | 6.7 MEDIUM | Buffer Copy Without Checking Size of Input in HLOS |
| CVE-2023-33069 | 6.7 MEDIUM | Buffer Copy Without Checking Size of Input in Audio |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Snapdragon
-
CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut -
CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware -
CVE-2026-25288
Buffer Over-read in WLAN Firmware -
CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr -
CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same vendor: Qualcomm, Inc.
-
CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut -
CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware -
CVE-2026-25288
Buffer Over-read in WLAN Firmware -
CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr -
CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same weakness: CWE-823
-
CVE-2026-45199
GPU DDK - rgxfw_to_ptr() does not reject FW private data poi -
CVE-2026-72642
Use of Out-of-range Pointer Offset in the Elasticsearch Mach -
CVE-2026-49746
GPU DDK - Dimension Mismatch and Integer Truncation in PMRDe -
CVE-2026-49745
GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write int -
CVE-2026-49744
GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()
V. Comments for CVE-2023-43513
No comments yet