Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2023-43535

Improper Validation of Array Index in Display

Description

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

Timeline

  1. ID reserved

    By qualcomm

  2. · 5 months later

    Published

  3. · 16 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-43535, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.11% · top 99% of all CVEs (11 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected FastConnect 6700
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected SC8380XP
    • affected Snapdragon 7c+ Gen 3 Compute
    • affected Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)
    • affected WCD9380
    • affected WCD9385
    • affected WSA8830
    • affected WSA8835
    • affected WSA8840
    • affected WSA8845
    • affected WSA8845H

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-43535 badge
[![CVE-2023-43535](https://cveledger.app/badge/CVE-2023-43535.svg)](https://cveledger.app/cve/CVE-2023-43535)

Record last updated .