CVE-2023-43519

Q: What is the severity of CVE-2023-43519?

CVE-2023-43519 has a CVSS score of 7.3 (HIGH). This vulnerability allows memory corruption in video processing when parsing Videoinfo atoms with sizes larger than expected. Attackers could potentially execute arbitrary code or cause denial of service. Affects Qualcomm chipsets used in mobile devices and other embedded systems.

7.3 HIGH

Buffer Overflow

📋 TL;DR

This vulnerability allows memory corruption in video processing when parsing Videoinfo atoms with sizes larger than expected. Attackers could potentially execute arbitrary code or cause denial of service. Affects Qualcomm chipsets used in mobile devices and other embedded systems.

💻 Affected Systems

Products:

Qualcomm chipsets with video processing capabilities

Versions: Multiple Qualcomm chipsets and firmware versions (see vendor advisory for specifics)

Operating Systems: Android, Linux-based embedded systems

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices using vulnerable Qualcomm video processing components. Specific chipset models listed in Qualcomm advisory.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution leading to complete device compromise, data theft, or persistent backdoor installation.

🟠

Likely Case

Application crashes, denial of service, or limited information disclosure from memory corruption.

🟢

If Mitigated

Controlled crashes without code execution if memory protections like ASLR are effective.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Exploitation requires specially crafted video files. No public exploits known as of advisory date.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Varies by device manufacturer - check device-specific security updates

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin

Restart Required: Yes

Instructions:

1. Check for device manufacturer security updates. 2. Apply latest firmware/OS updates. 3. Reboot device after update.

🔧 Temporary Workarounds

Restrict video file sources

all

Only allow video files from trusted sources and block untrusted video processing

Disable vulnerable video codecs

all

If possible, disable or restrict video formats that trigger the vulnerable parsing

🧯 If You Can't Patch

Network segmentation to isolate vulnerable devices
Implement strict input validation for video files

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against manufacturer security bulletins

Check Version:

Device-specific (e.g., Android: Settings > About phone > Android security patch level)

Verify Fix Applied:

Verify device has February 2024 or later security patches applied

📡 Detection & Monitoring

Log Indicators:

Video processing crashes
Memory corruption errors in system logs
Unexpected video parser failures

Network Indicators:

Unusual video file transfers to devices
Video processing from untrusted sources

SIEM Query:

Search for video processing errors, memory corruption events, or unexpected video file parsing

📊 Metadata

CVE ID: CVE-2023-43519

CVSS v3 Score: 7.3 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE: CWE-120

Published: February 6, 2024

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Aqt1000 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6320 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qcm2290 Firmware by Qualcomm

Qcm4290 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcn7606 Firmware by Qualcomm

Qcs2290 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4290 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sd 8 Gen1 5g Firmware by Qualcomm

Sd660 Firmware by Qualcomm

Sd730 Firmware by Qualcomm

Sd835 Firmware by Qualcomm

Sd855 Firmware by Qualcomm

Sd865 5g Firmware by Qualcomm

Sd888 Firmware by Qualcomm

Sm6250 Firmware by Qualcomm

Sm7250p Firmware by Qualcomm

Sm7315 Firmware by Qualcomm

Sm7325p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 460 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 660 Mobile Platform Firmware by Qualcomm

Snapdragon 662 Mobile Platform Firmware by Qualcomm

Snapdragon 665 Mobile Platform Firmware by Qualcomm

Snapdragon 675 Mobile Platform Firmware by Qualcomm

Snapdragon 678 Mobile Platform Firmware by Qualcomm

Snapdragon 680 4g Mobile Platform Firmware by Qualcomm

Snapdragon 685 4g Mobile Platform Firmware by Qualcomm

Snapdragon 690 5g Mobile Platform Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 720g Mobile Platform Firmware by Qualcomm

Snapdragon 730 Mobile Platform Firmware by Qualcomm