CVE-2023-21640: Buffer Copy Without Checking Size of Input in Linux
6.7
CVSS
Description
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
Classification
CVE ID: CVE-2023-21640
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.7
Affected Products
Vendor: Qualcomm, Inc.
Product: Snapdragon
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 14.88% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)