CVE-2023-21638

MEDIUM

Qualcomm FastConnect and AQT1000 Firmware - Memory Corruption in Video API

Title source: llm
STIX 2.1

Description

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

References (1)

Scores

CVSS v3 6.7
EPSS 0.0004
EPSS Percentile 12.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-704
Status published
Products (36)
qualcomm/aqt1000_firmware
qualcomm/fastconnect_6200_firmware
qualcomm/fastconnect_6800_firmware
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/qca6391_firmware
qualcomm/qca6420_firmware
qualcomm/qca6426_firmware
qualcomm/qca6430_firmware
qualcomm/qca6436_firmware
... and 26 more
Published Jul 04, 2023
Tracked Since Feb 18, 2026