CVE-2023-28562

CRITICAL

9.8

Description

Memory corruption while handling payloads from remote ESL.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/5/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:aqt1000qualcomm:aqt1000_firmwarequalcomm:fastconnect_6200qualcomm:fastconnect_6200_firmwarequalcomm:fastconnect_6800qualcomm:fastconnect_6800_firmwarequalcomm:qca6391qualcomm:qca6391_firmwarequalcomm:qca6420qualcomm:qca6420_firmwarequalcomm:qca6430qualcomm:qca6430_firmwarequalcomm:qcn7606qualcomm:qcn7606_firmwarequalcomm:qcs410qualcomm:qcs410_firmwarequalcomm:qcs610qualcomm:qcs610_firmwarequalcomm:sc8180x-aaqualcomm:sc8180x-aa_firmwarequalcomm:sc8180x-abqualcomm:sc8180x-ab_firmwarequalcomm:sc8180x-acqualcomm:sc8180x-ac_firmwarequalcomm:sc8180x-adqualcomm:sc8180x-ad_firmwarequalcomm:sc8180x-afqualcomm:sc8180x-af_firmwarequalcomm:sc8180x\+sdx55qualcomm:sc8180x\+sdx55_firmwarequalcomm:sc8180xp-aaqualcomm:sc8180xp-aa_firmwarequalcomm:sc8180xp-abqualcomm:sc8180xp-ab_firmwarequalcomm:sc8180xp-acqualcomm:sc8180xp-ac_firmwarequalcomm:sc8180xp-adqualcomm:sc8180xp-ad_firmwarequalcomm:sc8180xp-afqualcomm:sc8180xp-af_firmwarequalcomm:sd460qualcomm:sd460_firmwarequalcomm:sd662qualcomm:sd662_firmwarequalcomm:sd730qualcomm:sd730_firmwarequalcomm:sd855qualcomm:sd855_firmwarequalcomm:sdx55qualcomm:sdx55_firmwarequalcomm:sm4125qualcomm:sm4125_firmwarequalcomm:sm6250qualcomm:sm6250_firmwarequalcomm:sm6250pqualcomm:sm6250p_firmwarequalcomm:sm7250pqualcomm:sm7250p_firmwarequalcomm:snapdragon_460qualcomm:snapdragon_460_firmwarequalcomm:snapdragon_480\+_5gqualcomm:snapdragon_480\+_5g_firmwarequalcomm:snapdragon_480_5gqualcomm:snapdragon_480_5g_firmwarequalcomm:snapdragon_662qualcomm:snapdragon_662_firmwarequalcomm:snapdragon_675qualcomm:snapdragon_675_firmwarequalcomm:snapdragon_678qualcomm:snapdragon_678_firmwarequalcomm:snapdragon_690_5gqualcomm:snapdragon_690_5g_firmwarequalcomm:snapdragon_695_5gqualcomm:snapdragon_695_5g_firmwarequalcomm:snapdragon_720gqualcomm:snapdragon_720g_firmwarequalcomm:snapdragon_730qualcomm:snapdragon_730_firmwarequalcomm:snapdragon_730gqualcomm:snapdragon_730g_firmwarequalcomm:snapdragon_732gqualcomm:snapdragon_732g_firmwarequalcomm:snapdragon_750g_5gqualcomm:snapdragon_750g_5g_firmwarequalcomm:snapdragon_765_5gqualcomm:snapdragon_765_5g_firmwarequalcomm:snapdragon_765g_5gqualcomm:snapdragon_765g_5g_firmwarequalcomm:snapdragon_768g_5gqualcomm:snapdragon_768g_5g_firmwarequalcomm:snapdragon_855qualcomm:snapdragon_855\+qualcomm:snapdragon_855\+_firmwarequalcomm:snapdragon_855_firmwarequalcomm:snapdragon_860qualcomm:snapdragon_860_firmwarequalcomm:snapdragon_x50_5gqualcomm:snapdragon_x50_5g_firmwarequalcomm:snapdragon_x55_5gqualcomm:snapdragon_x55_5g_firmwarequalcomm:vision_intelligence_400qualcomm:vision_intelligence_400_firmwarequalcomm:wcd9326qualcomm:wcd9326_firmwarequalcomm:wcd9335qualcomm:wcd9335_firmwarequalcomm:wcd9340qualcomm:wcd9340_firmwarequalcomm:wcd9341qualcomm:wcd9341_firmwarequalcomm:wcd9370qualcomm:wcd9370_firmwarequalcomm:wcd9375qualcomm:wcd9375_firmwarequalcomm:wcd9380qualcomm:wcd9380_firmwarequalcomm:wcd9385qualcomm:wcd9385_firmwarequalcomm:wcn3910qualcomm:wcn3910_firmwarequalcomm:wcn3950qualcomm:wcn3950_firmwarequalcomm:wcn3980qualcomm:wcn3980_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wcn3990qualcomm:wcn3990_firmwarequalcomm:wsa8810qualcomm:wsa8810_firmwarequalcomm:wsa8815qualcomm:wsa8815_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Weaknesses (CWE)

CWE-120CWE-787

References

https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.