CVE-2023-28562

EPSS 0.36%
Veröffentlicht 05.09.2023 07:15:13
Zuletzt bearbeitet 21.11.2024 07:55:29
Erkennungen
Login

Buffer Copy Without Checking Size of Input in QESL

Memory corruption while handling payloads from remote ESL.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 68 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Aqt1000 Firmware Version -

Qualcomm ≫ Aqt1000 Version -

Qualcomm ≫ Fastconnect 6200 Firmware Version -

Qualcomm ≫ Fastconnect 6200 Version -

Qualcomm ≫ Fastconnect 6800 Firmware Version -

Qualcomm ≫ Fastconnect 6800 Version -

Qualcomm ≫ Qca6391 Firmware Version -

Qualcomm ≫ Qca6391 Version -

Qualcomm ≫ Qca6420 Firmware Version -

Qualcomm ≫ Qca6420 Version -

Qualcomm ≫ Qca6430 Firmware Version -

Qualcomm ≫ Qca6430 Version -

Qualcomm ≫ Qcn7606 Firmware Version -

Qualcomm ≫ Qcn7606 Version -

Qualcomm ≫ Qcs410 Firmware Version -

Qualcomm ≫ Qcs410 Version -

Qualcomm ≫ Qcs610 Firmware Version -

Qualcomm ≫ Qcs610 Version -

Qualcomm ≫ Sc8180x+sdx55 Firmware Version -

Qualcomm ≫ Sc8180x+sdx55 Version -

Qualcomm ≫ Sd460 Firmware Version -

Qualcomm ≫ Sd460 Version -

Qualcomm ≫ Sd662 Firmware Version -

Qualcomm ≫ Sd662 Version -

Qualcomm ≫ Sd730 Firmware Version -

Qualcomm ≫ Sd730 Version -

Qualcomm ≫ Sd855 Firmware Version -

Qualcomm ≫ Sd855 Version -

Qualcomm ≫ Sdx55 Firmware Version -

Qualcomm ≫ Sdx55 Version -

Qualcomm ≫ Sm4125 Firmware Version -

Qualcomm ≫ Sm4125 Version -

Qualcomm ≫ Sm6250 Firmware Version -

Qualcomm ≫ Sm6250 Version -

Qualcomm ≫ Sm6250p Firmware Version -

Qualcomm ≫ Sm6250p Version -

Qualcomm ≫ Sm7250p Firmware Version -

Qualcomm ≫ Sm7250p Version -

Qualcomm ≫ Snapdragon 460 Firmware Version -

Qualcomm ≫ Snapdragon 460 Version -

Qualcomm ≫ Snapdragon 480 5g Firmware Version -

Qualcomm ≫ Snapdragon 480 5g Version -

Qualcomm ≫ Snapdragon 480+ 5g Firmware Version -

Qualcomm ≫ Snapdragon 480+ 5g Version -

Qualcomm ≫ Snapdragon 662 Firmware Version -

Qualcomm ≫ Snapdragon 662 Version -

Qualcomm ≫ Snapdragon 675 Firmware Version -

Qualcomm ≫ Snapdragon 675 Version -

Qualcomm ≫ Snapdragon 678 Firmware Version -

Qualcomm ≫ Snapdragon 678 Version -

Qualcomm ≫ Snapdragon 690 5g Firmware Version -

Qualcomm ≫ Snapdragon 690 5g Version -

Qualcomm ≫ Snapdragon 695 5g Firmware Version -

Qualcomm ≫ Snapdragon 695 5g Version -

Qualcomm ≫ Snapdragon 720g Firmware Version -

Qualcomm ≫ Snapdragon 720g Version -

Qualcomm ≫ Snapdragon 730 Firmware Version -

Qualcomm ≫ Snapdragon 730 Version -

Qualcomm ≫ Snapdragon 730g Firmware Version -

Qualcomm ≫ Snapdragon 730g Version -

Qualcomm ≫ Snapdragon 732g Firmware Version -

Qualcomm ≫ Snapdragon 732g Version -

Qualcomm ≫ Snapdragon 750g 5g Firmware Version -

Qualcomm ≫ Snapdragon 750g 5g Version -

Qualcomm ≫ Snapdragon 765 5g Firmware Version -

Qualcomm ≫ Snapdragon 765 5g Version -

Qualcomm ≫ Snapdragon 765g 5g Firmware Version -

Qualcomm ≫ Snapdragon 765g 5g Version -

Qualcomm ≫ Snapdragon 768g 5g Firmware Version -

Qualcomm ≫ Snapdragon 768g 5g Version -

Qualcomm ≫ Snapdragon 855 Firmware Version -

Qualcomm ≫ Snapdragon 855 Version -

Qualcomm ≫ Snapdragon 855+ Firmware Version -

Qualcomm ≫ Snapdragon 855+ Version -

Qualcomm ≫ Snapdragon 860 Firmware Version -

Qualcomm ≫ Snapdragon 860 Version -

Qualcomm ≫ Sc8180x-ad Firmware Version -

Qualcomm ≫ Sc8180x-ad Version -

Qualcomm ≫ Sc8180xp-ad Firmware Version -

Qualcomm ≫ Sc8180xp-ad Version -

Qualcomm ≫ Sc8180x-aa Firmware Version -

Qualcomm ≫ Sc8180x-aa Version -

Qualcomm ≫ Sc8180x-ab Firmware Version -

Qualcomm ≫ Sc8180x-ab Version -

Qualcomm ≫ Sc8180xp-ac Firmware Version -

Qualcomm ≫ Sc8180xp-ac Version -

Qualcomm ≫ Sc8180xp-af Firmware Version -

Qualcomm ≫ Sc8180xp-af Version -

Qualcomm ≫ Sc8180x-ac Firmware Version -

Qualcomm ≫ Sc8180x-ac Version -

Qualcomm ≫ Sc8180x-af Firmware Version -

Qualcomm ≫ Sc8180x-af Version -

Qualcomm ≫ Sc8180xp-aa Firmware Version -

Qualcomm ≫ Sc8180xp-aa Version -

Qualcomm ≫ Sc8180xp-ab Firmware Version -

Qualcomm ≫ Sc8180xp-ab Version -

Qualcomm ≫ Snapdragon X50 5g Firmware Version -

Qualcomm ≫ Snapdragon X50 5g Version -

Qualcomm ≫ Snapdragon X55 5g Firmware Version -

Qualcomm ≫ Snapdragon X55 5g Version -

Qualcomm ≫ Vision Intelligence 400 Firmware Version -

Qualcomm ≫ Vision Intelligence 400 Version -

Qualcomm ≫ Wcd9326 Firmware Version -

Qualcomm ≫ Wcd9326 Version -

Qualcomm ≫ Wcd9335 Firmware Version -

Qualcomm ≫ Wcd9335 Version -

Qualcomm ≫ Wcd9340 Firmware Version -

Qualcomm ≫ Wcd9340 Version -

Qualcomm ≫ Wcd9341 Firmware Version -

Qualcomm ≫ Wcd9341 Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcd9375 Firmware Version -

Qualcomm ≫ Wcd9375 Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wcn3910 Firmware Version -

Qualcomm ≫ Wcn3910 Version -

Qualcomm ≫ Wcn3950 Firmware Version -

Qualcomm ≫ Wcn3950 Version -

Qualcomm ≫ Wcn3980 Firmware Version -

Qualcomm ≫ Wcn3980 Version -

Qualcomm ≫ Wcn3988 Firmware Version -

Qualcomm ≫ Wcn3988 Version -

Qualcomm ≫ Wcn3990 Firmware Version -

Qualcomm ≫ Wcn3990 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830 Version -

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.279

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Qualcomm	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-28562

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-28562

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-28562

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-28562