CVE-2023-43528CWE-126

Buffer Over-read in Audio

Medium · published May 6, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00108 · 1.1th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2024-05-06T14:32Z
EPSS history
Timeline
  • 06 MAY 14:32Z
    Buffer Over-read in Audio
    cvelistv5