Back
CVE-2023-43520Stack-based Buffer Overflow in WLAN HOST
- 8.6HighCVSS base score
- 0.26%Exploitation in 30 daysEPSS · top 81% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Timeline
ID reserved
By qualcomm
- 5 months later
· 5 months later
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| qualcommCNA (assigner) | 3.1 | High8.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
| NVDNVD · Modified | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.26% · top 81% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.6.
Affected products
- affected AR8035
- affected FastConnect 6900
- affected FastConnect 7800
- affected Flight RB5 5G Platform
- affected QAM8255P
- affected QAM8650P
- affected QAM8775P
- affected QAMSRV1H
- affected QAMSRV1M
- affected QCA6391
- affected QCA6554A
- affected QCA6564AU
- affected QCA6574
- affected QCA6574A
- affected QCA6574AU
- affected QCA6584AU
- affected QCA6595
- affected QCA6595AU
- affected QCA6688AQ
- affected QCA6696
- affected QCA8081
- affected QCA8337
- affected QCC2073
- affected QCC2076
- affected QCC710
- affected QCM8550
- affected QCN6224
- affected QCN6274
- affected QCS7230
- affected QCS8250
- affected QCS8550
- affected QFW7114
- affected QFW7124
- affected QRB5165N
- affected Qualcomm Video Collaboration VC5 Platform
- affected Robotics RB5 Platform
- affected SA6145P
- affected SA6150P
- affected SA6155P
- affected SA8145P
- and 30 more
References
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2023-47926 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2023-43520)Record last updated .