← Vulnerability feed

Vulnerability record · CVE-2023-21666 · published 2 May 2023

CVE-2023-21666: Qualcomm wcn3998 firmware memory leak vulnerability

Qualcomm · Wcn3998 Firmware

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

7.8 CVSS 3.1 High EPSS 0.18% · top 93.1% CWE-401 · Memory leak
7.8CVSS 3.1 base score
0.18%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/172664/Qualcomm-Adreno-KGSL-Data-Leakage.html
https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin PatchVendor Advisory
http://packetstormsecurity.com/files/172664/Qualcomm-Adreno-KGSL-Data-Leakage.html
https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin PatchVendor Advisory

Track CVE-2023-21666 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-33264Qualcomm 315 5g iot modem firmware stack-based buffer overflow vulnerabilityMemory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.EPSS 0.11%7.8CVE-2023-21665Qualcomm 315 5g iot modem firmware vulnerabilityMemory corruption in Graphics while importing a file.EPSS 0.18%7.8CVE-2022-33302Qualcomm 315 5g iot modem firmware vulnerabilityMemory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.EPSS 0.12%7.8CVE-2022-33296Qualcomm 315 5g iot modem firmware integer overflow vulnerabilityMemory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.EPSS 0.11%7.8CVE-2022-33231Qualcomm 8998 firmware double free vulnerabilityMemory corruption due to double free in core while initializing the encryption key.EPSS 0.08%7.5CVE-2022-40521Qualcomm 315 5g iot modem firmware improper authorization vulnerabilityTransient DOS due to improper authorization in ModemEPSS 0.35%7.5CVE-2022-40504Qualcomm 315 5g iot modem firmware vulnerabilityTransient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.EPSS 0.38%7.5CVE-2022-40503Qualcomm 9206 lte modem firmware out-of-bounds read vulnerabilityInformation disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.EPSS 0.41%

Source: NIST National Vulnerability Database (record CVE-2023-21666), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.