CVE-2023-28572 : Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Published 2023-11-07 06:15:10

Updated 2024-04-12 17:17:10

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-28572

Qualcomm » Msm8996au Firmware » Version: N/A
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Msm8996au » Version: N/A
Qualcomm » Qca6174a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6174a » Version: N/A
Qualcomm » Qca6574au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574au » Version: N/A
Qualcomm » Qca6584au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6584au » Version: N/A
Qualcomm » Qca9377 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca9377 » Version: N/A
Qualcomm » Qca9379 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca9379 » Version: N/A
Qualcomm » Qca6574 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574 » Version: N/A
Qualcomm » Sa6155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6155p » Version: N/A
Qualcomm » Qca6391 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6391 » Version: N/A
Qualcomm » Qca6595au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595au » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Sa8155p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8155p » Version: N/A
Qualcomm » Mdm9628 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9628 » Version: N/A
Qualcomm » Sa6145p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6145p » Version: N/A
Qualcomm » Sa6150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa6150p » Version: N/A
Qualcomm » Sa8150p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8150p » Version: N/A
Qualcomm » Sa8195p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8195p » Version: N/A
Qualcomm » Csrb31024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csrb31024 » Version: N/A
Qualcomm » Qca6175a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6175a » Version: N/A
Qualcomm » Qca6421 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6421 » Version: N/A
Qualcomm » Qca6426 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6426 » Version: N/A
Qualcomm » Qca6431 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6431 » Version: N/A
Qualcomm » Qca6436 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6436 » Version: N/A
Qualcomm » Qca6564a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6564a » Version: N/A
Qualcomm » Qca6564au Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6564au » Version: N/A
Qualcomm » Qca6574a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6574a » Version: N/A
Qualcomm » Qca6595 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6595 » Version: N/A
Qualcomm » Qca6696 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6696 » Version: N/A
Qualcomm » Wcd9380 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9380 » Version: N/A
Qualcomm » Wcd9385 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9385 » Version: N/A
Qualcomm » Wcn3980 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3980 » Version: N/A
Qualcomm » Wcn3988 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3988 » Version: N/A
Qualcomm » Wsa8830 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8830 » Version: N/A
Qualcomm » Wsa8835 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8835 » Version: N/A
Qualcomm » Sa8145p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8145p » Version: N/A
Qualcomm » Qca6554a Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6554a » Version: N/A
Qualcomm » Sw5100 Firmware » Version: N/A
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sw5100 » Version: N/A
Qualcomm » Sw5100p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sw5100p » Version: N/A
Qualcomm » Qam8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qam8295p » Version: N/A
Qualcomm » Sa8295p Firmware » Version: N/A
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Sa8295p » Version: N/A
Qualcomm » Qca6678aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6678aq » Version: N/A
Qualcomm » Qca6698aq Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca6698aq » Version: N/A
Qualcomm » Snapdragon 820 Automotive Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 820 Automotive Platform » Version: N/A
Qualcomm » Snapdragon Auto 5g Modem-rf Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon Auto 5g Modem-rf » Version: N/A
Qualcomm » Snapdragon X55 5g Modem-rf System Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon X55 5g Modem-rf System » Version: N/A
Qualcomm » Snapdragon Auto 4g Modem Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon Auto 4g Modem » Version: N/A
Qualcomm » Qcc2073 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcc2073_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcc2073 » Version: N/A
Qualcomm » Qcc2076 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcc2076_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcc2076 » Version: N/A
Qualcomm » Fastconnect 6800 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6800 » Version: N/A
Qualcomm » Fastconnect 6900 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 6900 » Version: N/A
Qualcomm » Fastconnect 7800 Firmware » Version: N/A
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Fastconnect 7800 » Version: N/A
Qualcomm » Snapdragon 865 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 865 5g Mobile Platform » Version: N/A
Qualcomm » Snapdragon 865+ 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_865\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 865+ 5g Mobile Platform » Version: N/A
Qualcomm » Snapdragon 870 5g Mobile Platform Firmware » Version: N/A
cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Snapdragon 870 5g Mobile Platform » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-28572

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 39 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-28572

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.6	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H	0.7	5.9	Qualcomm, Inc.
Attack Vector: Network Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-28572

CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Assigned by: product-security@qualcomm.com (Secondary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-28572

https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin

Security Bulletins | Qualcomm Documentation
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-28572

Products affected by CVE-2023-28572

Exploit prediction scoring system (EPSS) score for CVE-2023-28572

CVSS scores for CVE-2023-28572

CWE ids for CVE-2023-28572

References for CVE-2023-28572