CVE-2023-28562 : Memory corruption while handling payloads from remote ESL.

Memory corruption while handling payloads from remote ESL.

Published 2023-09-05 07:15:14

Updated 2024-04-12 17:17:07

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: OverflowMemory Corruption

Products affected by CVE-2023-28562

Qualcomm » Sd855 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd855 » Version: N/A
Qualcomm » Sdx55 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sdx55 » Version: N/A
Qualcomm » Qcs610 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs610 » Version: N/A
Qualcomm » Qcn7606 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn7606 » Version: N/A
Qualcomm » Aqt1000 Firmware » Version: N/A
cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Aqt1000 » Version: N/A
Qualcomm » Qca6391 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6391 » Version: N/A
Qualcomm » Qca6420 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6420 » Version: N/A
Qualcomm » Qca6430 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6430 » Version: N/A
Qualcomm » Wcd9335 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9335 » Version: N/A
Qualcomm » Wcd9340 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9340 » Version: N/A
Qualcomm » Wcd9341 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9341 » Version: N/A
Qualcomm » Wcn3990 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3990 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Sm6250 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm6250 » Version: N/A
Qualcomm » Sm7250p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm7250p » Version: N/A
Qualcomm » Qcs410 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs410 » Version: N/A
Qualcomm » Sm6250p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm6250p » Version: N/A
Qualcomm » Sm4125 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm4125 » Version: N/A
Qualcomm » Sd460 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd460 » Version: N/A
Qualcomm » Sd662 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd662 » Version: N/A
Qualcomm » Sd730 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd730 » Version: N/A
Qualcomm » Wcd9326 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9326 » Version: N/A
Qualcomm » Wcd9370 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9370 » Version: N/A
Qualcomm » Wcd9375 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9375 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wcn3910 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3910 » Version: N/A
Qualcomm » Wcn3950 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3950 » Version: N/A
Qualcomm » Wcn3980 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3980 » Version: N/A
Qualcomm » Wcn3988 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3988 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Sc8180x+sdx55 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180x\+sdx55_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180x+sdx55 » Version: N/A
Qualcomm » Sc8180x-ad Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180x-ad_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180x-ad » Version: N/A
Qualcomm » Sc8180xp-ad Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180xp-ad_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180xp-ad » Version: N/A
Qualcomm » Sc8180x-aa Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180x-aa_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180x-aa » Version: N/A
Qualcomm » Sc8180x-ab Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180x-ab_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180x-ab » Version: N/A
Qualcomm » Sc8180xp-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180xp-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180xp-ac » Version: N/A
Qualcomm » Sc8180xp-af Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180xp-af_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180xp-af » Version: N/A
Qualcomm » Sc8180x-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180x-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180x-ac » Version: N/A
Qualcomm » Sc8180x-af Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180x-af_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180x-af » Version: N/A
Qualcomm » Sc8180xp-aa Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180xp-aa_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180xp-aa » Version: N/A
Qualcomm » Sc8180xp-ab Firmware » Version: N/A
cpe:2.3:o:qualcomm:sc8180xp-ab_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sc8180xp-ab » Version: N/A
Qualcomm » Fastconnect 6200 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6200 » Version: N/A
Qualcomm » Fastconnect 6800 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6800 » Version: N/A
Qualcomm » Snapdragon 675 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_675_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 675 » Version: N/A
Qualcomm » Snapdragon 678 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_678_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 678 » Version: N/A
Qualcomm » Snapdragon 690 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_690_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 690 5g » Version: N/A
Qualcomm » Snapdragon 720g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_720g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 720g » Version: N/A
Qualcomm » Snapdragon 730 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_730_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 730 » Version: N/A
Qualcomm » Snapdragon 730g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_730g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 730g » Version: N/A
Qualcomm » Snapdragon 732g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_732g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 732g » Version: N/A
Qualcomm » Snapdragon 750g 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_750g_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 750g 5g » Version: N/A
Qualcomm » Snapdragon 765 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_765_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 765 5g » Version: N/A
Qualcomm » Snapdragon 765g 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_765g_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 765g 5g » Version: N/A
Qualcomm » Snapdragon 768g 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_768g_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 768g 5g » Version: N/A
Qualcomm » Snapdragon 855 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_855_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 855 » Version: N/A
Qualcomm » Snapdragon X50 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x50_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X50 5g » Version: N/A
Qualcomm » Snapdragon X55 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x55_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X55 5g » Version: N/A
Qualcomm » Vision Intelligence 400 Firmware » Version: N/A
cpe:2.3:o:qualcomm:vision_intelligence_400_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Vision Intelligence 400 » Version: N/A
Qualcomm » Snapdragon 460 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_460_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 460 » Version: N/A
Qualcomm » Snapdragon 480 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_480_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 480 5g » Version: N/A
Qualcomm » Snapdragon 480+ 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_480\+_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 480+ 5g » Version: N/A
Qualcomm » Snapdragon 662 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_662_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 662 » Version: N/A
Qualcomm » Snapdragon 695 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_695_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 695 5g » Version: N/A
Qualcomm » Snapdragon 855+ Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_855\+_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 855+ » Version: N/A
Qualcomm » Snapdragon 860 Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_860_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 860 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-28562

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 51 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-28562

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Qualcomm, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-28562

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: product-security@qualcomm.com (Secondary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-28562

https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

Security Bulletins | Qualcomm Documentation
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-28562

Products affected by CVE-2023-28562

Exploit prediction scoring system (EPSS) score for CVE-2023-28562

CVSS scores for CVE-2023-28562

CWE ids for CVE-2023-28562

References for CVE-2023-28562