CVE-2023-28581

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware

Published Sep 5, 2023 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Description
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-32251 Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
qualcomm
Published
Updated
Feb 27, 2025, 9:01 PM
Reserved
Mar 17, 2023, 11:41 AM
Status
Modified
Published
Sep 5, 2023, 7:15 AM
Modified
Jun 17, 2026, 5:48 AM