CVE-2023-28579

Buffer Copy Without Checking Size of Input in WLAN Host

Published Dec 5, 2023 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-32249 Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.
History
Type Values Removed Values Added
First Time appeared Qualcomm video Collaboration Vc1 Platform Firmware
Qualcomm video Collaboration Vc3 Platform Firmware
CPEs cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm qualcomm Video Collaboration Vc1 Platform Firmware
Qualcomm qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm video Collaboration Vc1 Platform Firmware
Qualcomm video Collaboration Vc3 Platform Firmware
Type Values Removed Values Added
First Time appeared Qualcomm video Collaboration Vc1 Platform
Qualcomm video Collaboration Vc3 Platform
CPEs cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc1_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc3_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:video_collaboration_vc1_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:video_collaboration_vc3_platform:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm qualcomm Video Collaboration Vc1 Platform
Qualcomm qualcomm Video Collaboration Vc3 Platform
Qualcomm video Collaboration Vc1 Platform
Qualcomm video Collaboration Vc3 Platform
Type Values Removed Values Added
First Time appeared Qualcomm snapdragon
CPEs cpe:2.3:h:qualcomm:snapdragon:*:*:*:*:*:*:*:*
Vendors & Products Qualcomm snapdragon
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Qualcomm Fastconnect 6900 Fastconnect 6900 Firmware Fastconnect 7800 Fastconnect 7800 Firmware Qam8295p Qam8295p Firmware Qca6391 Qca6391 Firmware Qca6574au Qca6574au Firmware Qca6595au Qca6595au Firmware Qca6696 Qca6696 Firmware Qcs410 Qcs410 Firmware Qcs610 Qcs610 Firmware Sa6145p Sa6145p Firmware Sa6150p Sa6150p Firmware Sa6155p Sa6155p Firmware Sa8145p Sa8145p Firmware Sa8150p Sa8150p Firmware Sa8155p Sa8155p Firmware Sa8195p Sa8195p Firmware Sa8295p Sa8295p Firmware Snapdragon Snapdragon 8 Gen 1 Mobile Platform Snapdragon 8 Gen 1 Mobile Platform Firmware Sw5100 Sw5100 Firmware Sw5100p Sw5100p Firmware Video Collaboration Vc1 Platform Video Collaboration Vc1 Platform Firmware Video Collaboration Vc3 Platform Video Collaboration Vc3 Platform Firmware Wcd9341 Wcd9341 Firmware Wcd9370 Wcd9370 Firmware Wcd9380 Wcd9380 Firmware Wcn3660b Wcn3660b Firmware Wcn3680b Wcn3680b Firmware Wcn3950 Wcn3950 Firmware Wcn3980 Wcn3980 Firmware Wcn3988 Wcn3988 Firmware Wsa8810 Wsa8810 Firmware Wsa8815 Wsa8815 Firmware Wsa8830 Wsa8830 Firmware Wsa8835 Wsa8835 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
qualcomm
Published
Updated
Oct 10, 2024, 7:53 PM
Reserved
Mar 17, 2023, 11:41 AM
Status
Modified
Published
Dec 5, 2023, 3:15 AM
Modified
Jun 17, 2026, 5:48 AM