CVE-2023-21666

HIGH

Qualcomm WCN3998 and QCA6390 Firmware - Memory Corruption in Graphics Buffer Handling

Title source: llm

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

Core 2

Core References

Patch, Vendor Advisory

Exploit, Third Party Advisory

CVSS v3 8.4

EPSS 0.0008

EPSS Percentile 24.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-401

Status published

Products (50)

qualcomm/8905_firmware

qualcomm/8909_firmware

qualcomm/8917_firmware

qualcomm/8953_firmware

qualcomm/8953pro_firmware

qualcomm/8998_firmware

qualcomm/apq5053-aa_firmware

qualcomm/apq8053-aa_firmware

qualcomm/apq8053-ac_firmware

qualcomm/apq8053-lite_firmware

... and 40 more

Published May 02, 2023

Tracked Since Feb 18, 2026