8.8

CVE-2023-28572

Buffer Over-read in WLAN HOST

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Csrb31024 Firmware Version -
   Qualcomm ≫ Csrb31024 Version -
Qualcomm ≫ Fastconnect 6800 Firmware Version -
   Qualcomm ≫ Fastconnect 6800 Version -
Qualcomm ≫ Fastconnect 6900 Firmware Version -
   Qualcomm ≫ Fastconnect 6900 Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
   Qualcomm ≫ Fastconnect 7800 Version -
Qualcomm ≫ Mdm9628 Firmware Version -
   Qualcomm ≫ Mdm9628 Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p Version -
Qualcomm ≫ Qca6174a Firmware Version -
   Qualcomm ≫ Qca6174a Version -
Qualcomm ≫ Qca6175a Firmware Version -
   Qualcomm ≫ Qca6175a Version -
Qualcomm ≫ Qca6391 Firmware Version -
   Qualcomm ≫ Qca6391 Version -
Qualcomm ≫ Qca6421 Firmware Version -
   Qualcomm ≫ Qca6421 Version -
Qualcomm ≫ Qca6426 Firmware Version -
   Qualcomm ≫ Qca6426 Version -
Qualcomm ≫ Qca6431 Firmware Version -
   Qualcomm ≫ Qca6431 Version -
Qualcomm ≫ Qca6436 Firmware Version -
   Qualcomm ≫ Qca6436 Version -
Qualcomm ≫ Qca6554a Firmware Version -
   Qualcomm ≫ Qca6554a Version -
Qualcomm ≫ Qca6564a Firmware Version -
   Qualcomm ≫ Qca6564a Version -
Qualcomm ≫ Qca6564au Firmware Version -
   Qualcomm ≫ Qca6564au Version -
Qualcomm ≫ Qca6574 Firmware Version -
   Qualcomm ≫ Qca6574 Version -
Qualcomm ≫ Qca6574a Firmware Version -
   Qualcomm ≫ Qca6574a Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595 Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6678aq Firmware Version -
   Qualcomm ≫ Qca6678aq Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq Version -
Qualcomm ≫ Qca9377 Firmware Version -
   Qualcomm ≫ Qca9377 Version -
Qualcomm ≫ Qca9379 Firmware Version -
   Qualcomm ≫ Qca9379 Version -
Qualcomm ≫ Qcc2073 Firmware Version -
   Qualcomm ≫ Qcc2073 Version -
Qualcomm ≫ Qcc2076 Firmware Version -
   Qualcomm ≫ Qcc2076 Version -
Qualcomm ≫ Sa6145p Firmware Version -
   Qualcomm ≫ Sa6145p Version -
Qualcomm ≫ Sa6150p Firmware Version -
   Qualcomm ≫ Sa6150p Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Sa8145p Firmware Version -
   Qualcomm ≫ Sa8145p Version -
Qualcomm ≫ Sa8150p Firmware Version -
   Qualcomm ≫ Sa8150p Version -
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p Version -
Qualcomm ≫ Sa8195p Firmware Version -
   Qualcomm ≫ Sa8195p Version -
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p Version -
Qualcomm ≫ Sw5100 Firmware Version -
   Qualcomm ≫ Sw5100 Version -
Qualcomm ≫ Sw5100p Firmware Version -
   Qualcomm ≫ Sw5100p Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.318
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 6.6 0.7 5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
Patch
Vendor Advisory