Back
CVE-2023-43513
Use of Out-of-range Pointer Offset in PCIe
High7.8EPSS 0.11%
- Published
- Updated
- Reserved
- Assigned by
- qualcomm
Description
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Timeline
ID reserved
By qualcomm
- 5 months later
· 5 months later
Published
- 17 months later
· 17 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| qualcommCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.11% · top 99% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 315 5G IoT Modem
- affected APQ8017
- affected AQT1000
- affected AR8031
- affected AR8035
- affected C-V2X 9150
- affected CSRA6620
- affected CSRA6640
- affected CSRB31024
- affected FastConnect 6200
- affected FastConnect 6700
- affected FastConnect 6800
- affected FastConnect 6900
- affected FastConnect 7800
- affected Flight RB5 5G Platform
- affected FSM20055
- affected FSM20056
- affected Immersive Home 214 Platform
- affected Immersive Home 216 Platform
- affected Immersive Home 316 Platform
- affected Immersive Home 318 Platform
- affected Immersive Home 3210 Platform
- affected Immersive Home 326 Platform
- affected IPQ5010
- affected IPQ6018
- affected IPQ8074A
- affected IPQ8174
- affected IPQ9574
- affected MDM9628
- affected QAM8255P
- affected QAM8295P
- affected QAM8650P
- affected QAM8775P
- affected QAMSRV1H
- affected QAMSRV1M
- affected QCA4024
- affected QCA6174A
- affected QCA6310
- affected QCA6335
- affected QCA6391
- and 227 more
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-43513)Record last updated .