OpenSSL serialized header verification bug causes memory corruption during keygen
CVE-2023-43531 Published on May 6, 2024

Access of Uninitialized Pointer in SPS Applications
Memory corruption while verifying the serialized header when the key pairs are generated.

NVD

Vulnerability Analysis

CVE-2023-43531 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

Access of Uninitialized Pointer

The program accesses or uses a pointer that has not been initialized.

Products Associated with CVE-2023-43531

Want to know whenever a new CVE is published for Google Android? stack.watch will email you.

Google Android

Affected Versions

Qualcomm, Inc. Snapdragon:

Version AR8035 is affected.
Version FastConnect 6200 is affected.
Version FastConnect 6700 is affected.
Version FastConnect 6800 is affected.
Version FastConnect 6900 is affected.
Version FastConnect 7800 is affected.
Version QAM8255P is affected.
Version QAM8295P is affected.
Version QAM8650P is affected.
Version QAM8775P is affected.
Version QAMSRV1H is affected.
Version QAMSRV1M is affected.
Version QCA6174A is affected.
Version QCA6391 is affected.
Version QCA6421 is affected.
Version QCA6426 is affected.
Version QCA6431 is affected.
Version QCA6436 is affected.
Version QCA6574 is affected.
Version QCA6574A is affected.
Version QCA6574AU is affected.
Version QCA6584AU is affected.
Version QCA6595 is affected.
Version QCA6595AU is affected.
Version QCA6678AQ is affected.
Version QCA6696 is affected.
Version QCA6698AQ is affected.
Version QCA6797AQ is affected.
Version QCA8081 is affected.
Version QCA8337 is affected.
Version QCC710 is affected.
Version QCM4490 is affected.
Version QCM5430 is affected.
Version QCM6490 is affected.
Version QCM8550 is affected.
Version QCN6224 is affected.
Version QCN6274 is affected.
Version QCS4490 is affected.
Version QCS5430 is affected.
Version QCS6490 is affected.
Version QCS8550 is affected.
Version QDU1000 is affected.
Version QDU1010 is affected.
Version QDU1110 is affected.
Version QDU1210 is affected.
Version QDX1010 is affected.
Version QDX1011 is affected.
Version QEP8111 is affected.
Version QFW7114 is affected.
Version QFW7124 is affected.
Version QRU1032 is affected.
Version QRU1052 is affected.
Version QRU1062 is affected.
Version QSM8350 is affected.
Version Qualcomm Video Collaboration VC3 Platform is affected.
Version SA6145P is affected.
Version SA6150P is affected.
Version SA6155P is affected.
Version SA7255P is affected.
Version SA8145P is affected.
Version SA8150P is affected.
Version SA8155P is affected.
Version SA8195P is affected.
Version SA8255P is affected.
Version SA8295P is affected.
Version SA8530P is affected.
Version SA8540P is affected.
Version SA8620P is affected.
Version SA8650P is affected.
Version SA8770P is affected.
Version SA8775P is affected.
Version SA9000P is affected.
Version SC8380XP is affected.
Version SD 8 Gen1 5G is affected.
Version SD865 5G is affected.
Version SG8275P is affected.
Version SM7250P is affected.
Version SM8550P is affected.
Version Snapdragon 4 Gen 2 Mobile Platform is affected.
Version Snapdragon 765 5G Mobile Platform (SM7250-AA) is affected.
Version Snapdragon 765G 5G Mobile Platform (SM7250-AB) is affected.
Version Snapdragon 768G 5G Mobile Platform (SM7250-AC) is affected.
Version Snapdragon 8 Gen 1 Mobile Platform is affected.
Version Snapdragon 8 Gen 2 Mobile Platform is affected.
Version Snapdragon 8 Gen 3 Mobile Platform is affected.
Version Snapdragon 8+ Gen 1 Mobile Platform is affected.
Version Snapdragon 8+ Gen 2 Mobile Platform is affected.
Version Snapdragon 865 5G Mobile Platform is affected.
Version Snapdragon 865+ 5G Mobile Platform (SM8250-AB) is affected.
Version Snapdragon 870 5G Mobile Platform (SM8250-AC) is affected.
Version Snapdragon 888 5G Mobile Platform is affected.
Version Snapdragon 888+ 5G Mobile Platform (SM8350-AC) is affected.
Version Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB) is affected.
Version Snapdragon AR2 Gen 1 Platform is affected.
Version Snapdragon Auto 5G Modem-RF Gen 2 is affected.
Version Snapdragon W5+ Gen 1 Wearable Platform is affected.
Version Snapdragon X35 5G Modem-RF System is affected.
Version Snapdragon X55 5G Modem-RF System is affected.
Version Snapdragon X65 5G Modem-RF System is affected.
Version Snapdragon X72 5G Modem-RF System is affected.
Version Snapdragon X75 5G Modem-RF System is affected.
Version Snapdragon XR2 5G Platform is affected.
Version SRV1H is affected.
Version SRV1M is affected.
Version SSG2115P is affected.
Version SSG2125P is affected.
Version SW5100 is affected.
Version SW5100P is affected.
Version SXR1230P is affected.
Version SXR2130 is affected.
Version TalynPlus is affected.
Version WCD9340 is affected.
Version WCD9370 is affected.
Version WCD9375 is affected.
Version WCD9380 is affected.
Version WCD9385 is affected.
Version WCD9390 is affected.
Version WCD9395 is affected.
Version WCN3950 is affected.
Version WCN3980 is affected.
Version WCN3988 is affected.
Version WSA8810 is affected.
Version WSA8815 is affected.
Version WSA8830 is affected.
Version WSA8832 is affected.
Version WSA8835 is affected.
Version WSA8840 is affected.
Version WSA8845 is affected.
Version WSA8845H is affected.

qualcomm ar8035_firmware:

Before and including * is affected.

qualcomm fastconnect_6200_firmware:

Before and including * is affected.

qualcomm fastconnect_6700_firmware:

Before and including * is affected.

qualcomm fastconnect_6800_firmware:

Before and including * is affected.

qualcomm fastconnect_6900_firmware:

Before and including * is affected.

qualcomm fastconnect_7800_firmware:

Before and including * is affected.

qualcomm qam8255p_firmware:

Before and including * is affected.

qualcomm qam8295p_firmware:

Before and including * is affected.

qualcomm qam8650p_firmware:

Before and including * is affected.

qualcomm qam8775p_firmware:

Before and including * is affected.

qualcomm qamsrv1h_firmware:

Before and including * is affected.

qualcomm qamsrv1m_firmware:

Before and including * is affected.

qualcomm qca6174a_firmware:

Before and including * is affected.

qualcomm qca6391_firmware:

Before and including * is affected.

qualcomm qca6421_firmware:

Before and including * is affected.

qualcomm qca6426_firmware:

Before and including * is affected.

qualcomm qca6431_firmware:

Before and including * is affected.

qualcomm qca6436_firmware:

Before and including * is affected.

qualcomm qca6574_firmware:

Before and including * is affected.

qualcomm qca6574a_firmware:

Before and including * is affected.

qualcomm qca6574au_firmware:

Before and including * is affected.

qualcomm qca6584au_firmware:

Before and including * is affected.

qualcomm qca6595_firmware:

Before and including * is affected.

qualcomm qca6595au_firmware:

Before and including * is affected.

qualcomm qca6678aq_firmware:

Before and including * is affected.

qualcomm qca6696_firmware:

Before and including * is affected.

qualcomm qca6698aq_firmware:

Before and including * is affected.

qualcomm qca6797aq_firmware:

Before and including * is affected.

qualcomm qca8081_firmware:

Before and including * is affected.

qualcomm qca8337_firmware:

Before and including * is affected.

qualcomm qcc710_firmware:

Before and including * is affected.

qualcomm qcm4490_firmware:

Before and including * is affected.

qualcomm qcm5430_firmware:

Before and including * is affected.

qualcomm qcm6490_firmware:

Before and including * is affected.

qualcomm qcm8550_firmware:

Before and including * is affected.

qualcomm qcn6224_firmware:

Before and including * is affected.

qualcomm qcn6274_firmware:

Before and including * is affected.

qualcomm qcs4490_firmware:

Before and including * is affected.

qualcomm qcs5430_firmware:

Before and including * is affected.

qualcomm qcs6490_firmware:

Before and including * is affected.

qualcomm qcs8550_firmware:

Before and including * is affected.

qualcomm qdu1000_firmware:

Before and including * is affected.

qualcomm qdu1010_firmware:

Before and including * is affected.

qualcomm qdu1110_firmware:

Before and including * is affected.

qualcomm qdu1210_firmware:

Before and including * is affected.

qualcomm qdx1010_firmware:

Before and including * is affected.

qualcomm qdx1011_firmware:

Before and including * is affected.

qualcomm qep8111_firmware:

Before and including * is affected.

qualcomm qfw7114_firmware:

Before and including * is affected.

qualcomm qfw7124_firmware:

Before and including * is affected.

qualcomm qru1032_firmware:

Before and including * is affected.

qualcomm qru1052_firmware:

Before and including * is affected.

qualcomm qru1062_firmware:

Before and including * is affected.

qualcomm qsm8350_firmware:

Before and including * is affected.

qualcomm_video_collaboration_vc3_platform_firmware:

Before and including * is affected.

qualcomm sa6145p_firmware:

Before and including * is affected.

qualcomm sa6150p_firmware:

Before and including * is affected.

qualcomm sa6155p_firmware:

Before and including * is affected.

qualcomm sa7255p_firmware:

Before and including * is affected.

qualcomm sa8145p_firmware:

Before and including * is affected.

qualcomm sa8150p_firmware:

Before and including * is affected.

qualcomm sa8155p_firmware:

Before and including * is affected.

qualcomm sa8195p_firmware:

Before and including * is affected.

qualcomm sa8255p_firmware:

Before and including * is affected.

qualcomm sa8295p_firmware:

Before and including * is affected.

qualcomm sa8530p_firmware:

Before and including * is affected.

qualcomm sa8540p_firmware:

Before and including * is affected.

qualcomm sa8620p_firmware:

Before and including * is affected.

qualcomm sa8650p_firmware:

Before and including * is affected.

qualcomm sa8770p_firmware:

Before and including * is affected.

qualcomm sa8775p_firmware:

Before and including * is affected.

qualcomm sa9000p_firmware:

Before and including * is affected.

qualcomm sc8380xp_firmware:

Before and including * is affected.

qualcomm sd_8_gen1_5g_firmware:

Before and including * is affected.

qualcomm sd865_5g_firmware:

Before and including * is affected.

qualcomm sg8275p_firmware:

Before and including * is affected.

qualcomm sm7250p_firmware:

Before and including * is affected.

qualcomm sm8550p_firmware:

Before and including * is affected.

qualcomm snapdragon_4_gen_2_mobile_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_8_gen_1_mobile_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_8_gen_2_mobile_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_8_gen_3_mobile_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_865_5g_mobile_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_888_5g_mobile_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_ar2_gen_1_platform_firmware:

Before and including * is affected.

qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware:

Before and including * is affected.

qualcomm snapdragon_x35_5g_modem-rf_system_firmware:

Before and including * is affected.

qualcomm snapdragon_x55_5g_modem-rf_system_firmware:

Before and including * is affected.

qualcomm snapdragon_x65_5g_modem-rf_system_firmware:

Before and including * is affected.

qualcomm snapdragon_x72_5g_modem-rf_system_firmware:

Before and including * is affected.

qualcomm snapdragon_x75_5g_modem-rf_system_firmware:

Before and including * is affected.

qualcomm snapdragon_xr2_5g_platform_firmware:

Before and including * is affected.

qualcomm srv1h_firmware:

Before and including * is affected.

qualcomm srv1m_firmware:

Before and including * is affected.

qualcomm ssg2115p_firmware:

Before and including * is affected.

qualcomm ssg2125p_firmware:

Before and including * is affected.

qualcomm sw5100_firmware:

Before and including * is affected.

qualcomm sw5100p_firmware:

Before and including * is affected.

qualcomm sxr1230p_firmware:

Before and including * is affected.

qualcomm sxr2130_firmware:

Before and including * is affected.

qualcomm talynplus_firmware:

Before and including * is affected.

qualcomm wcd9340_firmware:

Before and including * is affected.

qualcomm wcd9370_firmware:

Before and including * is affected.

qualcomm wcd9375_firmware:

Before and including * is affected.

qualcomm wcd9380_firmware:

Before and including * is affected.

qualcomm wcd9385_firmware:

Before and including * is affected.

qualcomm wcd9390_firmware:

Before and including * is affected.

qualcomm wcd9395_firmware:

Before and including * is affected.

qualcomm wcn3950_firmware:

Before and including * is affected.

qualcomm wcn3980_firmware:

Before and including * is affected.

qualcomm wcn3988_firmware:

Before and including * is affected.

qualcomm wsa8810_firmware:

Before and including * is affected.

qualcomm wsa8815_firmware:

Before and including * is affected.

qualcomm wsa8830_firmware:

Before and including * is affected.

qualcomm wsa8832_firmware:

Before and including * is affected.

qualcomm wsa8835_firmware:

Before and including * is affected.

qualcomm wsa8840_firmware:

Before and including * is affected.

qualcomm wsa8845_firmware:

Before and including * is affected.

qualcomm wsa8845h_firmware:

Before and including * is affected.

Exploit Probability

EPSS

0.06%

Percentile

19.18%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

OpenSSL serialized header verification bug causes memory corruption during keygenCVE-2023-43531 Published on May 6, 2024

Vulnerability Analysis

Weakness Type

Access of Uninitialized Pointer

Products Associated with CVE-2023-43531

Affected Versions

Exploit Probability

OpenSSL serialized header verification bug causes memory corruption during keygen
CVE-2023-43531 Published on May 6, 2024