CVE-2023-28571 : Information disclosure in WLAN HOST while processing the WLAN scan descriptor li

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

Published 2023-10-03 06:15:25

Updated 2024-04-12 17:17:10

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2023-28571

Qualcomm » Mdm9650 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9650 » Version: N/A
Qualcomm » S820a Firmware » Version: N/A
cpe:2.3:o:qualcomm:s820a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » S820a » Version: N/A
Qualcomm » Msm8996au Firmware » Version: N/A
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Msm8996au » Version: N/A
Qualcomm » Qca6574au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574au » Version: N/A
Qualcomm » Qca6584au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6584au » Version: N/A
Qualcomm » Qca6574 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574 » Version: N/A
Qualcomm » Sd835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd835 » Version: N/A
Qualcomm » Sm8250 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8250 » Version: N/A
Qualcomm » Sxr2130 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sxr2130 » Version: N/A
Qualcomm » Sa6155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6155p » Version: N/A
Qualcomm » Qcs610 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs610 » Version: N/A
Qualcomm » Qca6390 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6390 » Version: N/A
Qualcomm » Qca6310 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6310 » Version: N/A
Qualcomm » Qca6391 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6391 » Version: N/A
Qualcomm » Qca6595au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595au » Version: N/A
Qualcomm » Wcd9335 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9335 » Version: N/A
Qualcomm » Wcd9340 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9340 » Version: N/A
Qualcomm » Wcd9341 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9341 » Version: N/A
Qualcomm » Wcn3990 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3990 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Sa8155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8155p » Version: N/A
Qualcomm » Apq8064au Firmware » Version: N/A
cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Apq8064au » Version: N/A
Qualcomm » Sa6145p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6145p » Version: N/A
Qualcomm » Sa6150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6150p » Version: N/A
Qualcomm » Sa8150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8150p » Version: N/A
Qualcomm » Sa8195p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8195p » Version: N/A
Qualcomm » Qcs410 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs410 » Version: N/A
Qualcomm » Csrb31024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csrb31024 » Version: N/A
Qualcomm » Qca6175a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6175a » Version: N/A
Qualcomm » Qca6320 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6320 » Version: N/A
Qualcomm » Qca6421 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6421 » Version: N/A
Qualcomm » Qca6426 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6426 » Version: N/A
Qualcomm » Qca6431 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6431 » Version: N/A
Qualcomm » Qca6436 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6436 » Version: N/A
Qualcomm » Qca6564a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6564a » Version: N/A
Qualcomm » Qca6564au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6564au » Version: N/A
Qualcomm » Qca6574a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574a » Version: N/A
Qualcomm » Qca6595 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595 » Version: N/A
Qualcomm » Qca6696 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6696 » Version: N/A
Qualcomm » Qcn9074 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9074 » Version: N/A
Qualcomm » Sd865 5g Firmware » Version: N/A
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sd865 5g » Version: N/A
Qualcomm » Wcd9370 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9370 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wcn3950 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3950 » Version: N/A
Qualcomm » Wcn3980 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3980 » Version: N/A
Qualcomm » Wcn3988 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3988 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Sa8145p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8145p » Version: N/A
Qualcomm » Qca6554a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6554a » Version: N/A
Qualcomm » Sw5100 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sw5100 » Version: N/A
Qualcomm » Sw5100p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sw5100p » Version: N/A
Qualcomm » Qam8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qam8295p » Version: N/A
Qualcomm » Sa8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8295p » Version: N/A
Qualcomm » Wcd9390 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9390 » Version: N/A
Qualcomm » Wcd9395 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9395 » Version: N/A
Qualcomm » Wsa8840 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8840 » Version: N/A
Qualcomm » Wsa8845 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845 » Version: N/A
Qualcomm » Wsa8845h Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8845h » Version: N/A
Qualcomm » Qca6678aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6678aq » Version: N/A
Qualcomm » Qca6698aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6698aq » Version: N/A
Qualcomm » Wcn685x-1 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn685x-1 » Version: N/A
Qualcomm » Wcn785x-1 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn785x-1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn785x-1 » Version: N/A
Qualcomm » Wcn685x-5 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn685x-5 » Version: N/A
Qualcomm » Wcn785x-5 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn785x-5_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn785x-5 » Version: N/A
Qualcomm » Sm8250-ab Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8250-ab_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8250-ab » Version: N/A
Qualcomm » Sm8250-ac Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8250-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8250-ac » Version: N/A
Qualcomm » Snapdragon Auto 5g Modem-rf Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon Auto 5g Modem-rf » Version: N/A
Qualcomm » Snapdragon W5+ Gen 1 Wearable Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon W5+ Gen 1 Wearable Platform » Version: N/A
Qualcomm » Snapdragon X55 5g Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X55 5g Modem-rf System » Version: N/A
Qualcomm » Snapdragon Xr2 5g Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon Xr2 5g Platform » Version: N/A
Qualcomm » Snapdragon Auto 4g Modem Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon Auto 4g Modem » Version: N/A
Qualcomm » 8998 Firmware » Version: N/A
cpe:2.3:o:qualcomm:8998_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » 8998 » Version: N/A
Qualcomm » 8098 Firmware » Version: N/A
cpe:2.3:o:qualcomm:8098_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » 8098 » Version: N/A
Qualcomm » Qam8255p Firmware » Version: N/A
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qam8255p » Version: N/A
Qualcomm » Qca6797aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6797aq » Version: N/A
Qualcomm » Sa8255p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8255p » Version: N/A
Qualcomm » Qcc2073 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcc2073_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcc2073 » Version: N/A
Qualcomm » Qcc2076 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcc2076_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcc2076 » Version: N/A
Qualcomm » Qualcomm Video Collaboration Vc3 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qualcomm Video Collaboration Vc3 Platform » Version: N/A
Qualcomm » Sm8550p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sm8550p » Version: N/A
Qualcomm » Snapdragon 8 Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8 Gen 2 Mobile Platform » Version: N/A
Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 8+ Gen 2 Mobile Platform » Version: N/A
Qualcomm » Qualcomm Video Collaboration Vc1 Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qualcomm Video Collaboration Vc1 Platform » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-28571

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-28571

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
6.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L	1.8	4.2	Qualcomm, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: Low

CWE ids for CVE-2023-28571

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)
CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Assigned by: product-security@qualcomm.com (Secondary)

References for CVE-2023-28571

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

Security Bulletins | Qualcomm Documentation
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-28571

Products affected by CVE-2023-28571

Exploit prediction scoring system (EPSS) score for CVE-2023-28571

CVSS scores for CVE-2023-28571

CWE ids for CVE-2023-28571

References for CVE-2023-28571