CVE-2023-43556

Q: What is the severity of CVE-2023-43556?

CVE-2023-43556 has a CVSS score of 9.3 (CRITICAL). This CVE describes a memory corruption vulnerability in Qualcomm's hypervisor when platform information is not properly aligned. Successful exploitation could allow attackers to execute arbitrary code in the hypervisor context, potentially compromising the entire system. This affects devices using vulnerable Qualcomm chipsets.

9.3 CRITICAL

📋 TL;DR

This CVE describes a memory corruption vulnerability in Qualcomm's hypervisor when platform information is not properly aligned. Successful exploitation could allow attackers to execute arbitrary code in the hypervisor context, potentially compromising the entire system. This affects devices using vulnerable Qualcomm chipsets.

💻 Affected Systems

Products:

Qualcomm chipsets with vulnerable hypervisor implementation

Versions: Specific versions not publicly detailed in references; affected by June 2024 bulletin

Operating Systems: Android, Linux-based systems using Qualcomm chipsets

Default Config Vulnerable: ⚠️ Yes

Notes: Affects mobile devices, IoT devices, and embedded systems using vulnerable Qualcomm SoCs. Exact chipset models not specified in provided references.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system compromise allowing attacker to bypass hypervisor security, access all guest VMs, and potentially achieve persistent firmware-level access.

🟠

Likely Case

Local privilege escalation allowing attackers to gain hypervisor-level privileges from a compromised guest VM or application.

🟢

If Mitigated

Limited impact if hypervisor is properly isolated and system uses hardware security features like TPM/secure boot.

🌐 Internet-Facing: LOW - Requires local access or ability to execute code on the system first.

🏢 Internal Only: HIGH - Once an attacker gains initial access to a vulnerable system, they can escalate to hypervisor privileges.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires detailed knowledge of hypervisor memory layout and ability to trigger misaligned platform information access.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches included in June 2024 security bulletin

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html

Restart Required: Yes

Instructions:

1. Check with device manufacturer for firmware updates. 2. Apply Qualcomm-provided patches through OEM firmware updates. 3. Reboot device after update installation.

🔧 Temporary Workarounds

Hypervisor isolation hardening

all

Implement strict hypervisor isolation policies to limit attack surface

🧯 If You Can't Patch

Isolate vulnerable systems from critical networks
Implement strict application whitelisting to prevent initial compromise

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against Qualcomm security bulletin; consult manufacturer security advisories

Check Version:

Device-specific commands vary by manufacturer; typically in Settings > About Phone > Build Number

Verify Fix Applied:

Verify firmware version has been updated to include June 2024 or later security patches

📡 Detection & Monitoring

Log Indicators:

Hypervisor crash logs
Memory access violation errors in system logs
Unexpected hypervisor privilege changes

Network Indicators:

None - local exploitation only

SIEM Query:

Search for hypervisor-related crash events or privilege escalation attempts in system logs

📊 Metadata

CVE ID: CVE-2023-43556

CVSS v3 Score: 9.3 (CRITICAL)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE: CWE-120

Published: June 3, 2024

Last Updated: August 11, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html Vendor Advisory
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn9011 Firmware by Qualcomm

Qcn9012 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Qrb5165m Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Qsm8350 Firmware by Qualcomm

Robotics Rb5 Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8540p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sc8280xp Abbb Firmware by Qualcomm

Sd888 Firmware by Qualcomm

Sdx57m Firmware by Qualcomm

Sm7315 Firmware by Qualcomm

Sm7325p Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Firmware by Qualcomm

Snapdragon 778g 5g Mobile Firmware by Qualcomm

Snapdragon 778g 5g Mobile Firmware by Qualcomm

Snapdragon 780g 5g Mobile Firmware by Qualcomm

Snapdragon 782g Mobile Firmware by Qualcomm

Snapdragon 7c\+ Gen 3 Compute Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Firmware by Qualcomm

Snapdragon 8 Gen 1 Mobile Firmware by Qualcomm

Snapdragon 888 5g Mobile Firmware by Qualcomm

Snapdragon 888 5g Mobile Firmware by Qualcomm

Snapdragon Ar2 Gen 1 Firmware by Qualcomm

Snapdragon X65 5g Modem Rf Firmware by Qualcomm

Snapdragon X70 Modem Rf Firmware by Qualcomm

Ssg2115p Firmware by Qualcomm

Ssg2125p Firmware by Qualcomm

Sxr1230p Firmware by Qualcomm

Sxr2230p Firmware by Qualcomm

Video Collaboration Vc3 Platform Firmware by Qualcomm

Video Collaboration Vc5 Platform Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm

Wcn3950 Firmware by Qualcomm

Wcn3988 Firmware by Qualcomm

Wcn6740 Firmware by Qualcomm

Wsa8810 Firmware by Qualcomm

Wsa8815 Firmware by Qualcomm

Wsa8830 Firmware by Qualcomm

Wsa8832 Firmware by Qualcomm

Wsa8835 Firmware by Qualcomm