{"id":"CVE-2023-53729","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: qmi_encdec: Restrict string length in decode\n\nThe QMI TLV value for strings in a lot of qmi element info structures\naccount for null terminated strings with …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: qmi_encdec: Restrict string length in decode\n\nThe QMI TLV value for strings in a lot of qmi element info structures\naccount for null terminated strings with …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < 6b58859e7c4ac357517a59f0801e8ce1b58a8ee2","Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < 64c5e916fabe5ef7bef0210b8a59fa8941ee1b8e","Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < 2ccab9f82772ead618689d17dbc6950d6bd1e741","Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < b2f39b813d1eed4a522428d1e6acd7dfe9b81579","Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < f6250ecb7fbb934b89539e7e2ba6c1d8555c0975","Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < 22ee7c9c7f381be178b4457bc54530002e08e938","Linux >= 9b8a11e82615274d4133aab3cf5aa1c59191f0a2 < 8d207400fd6b79c92aeb2f33bb79f62dff904ea2","Linux 4.16"],"published":"2025-10-22","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:47.613","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-53729","references":[{"url":"https://git.kernel.org/stable/c/22ee7c9c7f381be178b4457bc54530002e08e938","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2ccab9f82772ead618689d17dbc6950d6bd1e741","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/64c5e916fabe5ef7bef0210b8a59fa8941ee1b8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6b58859e7c4ac357517a59f0801e8ce1b58a8ee2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8d207400fd6b79c92aeb2f33bb79f62dff904ea2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b2f39b813d1eed4a522428d1e6acd7dfe9b81579","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f6250ecb7fbb934b89539e7e2ba6c1d8555c0975","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00153,"epssPercentile":0.044,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:36:52.702792Z"},"ingestedAt":"2026-10-15T22:48:25.417Z","slug":"CVE-2023-53729","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: qmi_encdec: Restrict string length in decode\n\nThe QMI TLV value for strings in a lot of qmi element info structures\naccount for null terminated strings with MAX_LEN + 1. If a string is\nactually MAX_LEN + 1 length, this will cause an out of bounds access\nwhen the NULL character is appended in decoding.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}