CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-21639
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:aqt1000_firmware
- qualcomm:fastconnect_6200_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6430_firmware
- qualcomm:sa4150p_firmware
- qualcomm:sa4155p_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sa8195p_firmware
- qualcomm:sd855_firmware
- qualcomm:snapdragon_855\+\/860_firmware
- qualcomm:snapdragon_855_firmware
- qualcomm:snapdragon_w5\+_gen_1_firmware
- qualcomm:sw5100_firmware
- qualcomm:sw5100p_firmware
- qualcomm:wcd9341_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wcn3988_firmware
- qualcomm:wsa8810_firmware
- qualcomm:wsa8815_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8835_firmware