CVE-2023-43513CWE-823
Use of Out-of-range Pointer Offset in PCIe
High · published February 6, 2024
What it is
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
The record
Technical detail
- CVSS v3.1
- 7.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00110 · 1.2th percentile
- Weakness
- CWE-823 · Use of Out-of-range Pointer Offset
- Published
- 2024-02-06T05:47Z
EPSS history
Timeline