9
CVE-2023-28574
- EPSS 0.05%
- Published 07.11.2023 06:15:10
- Last modified 21.11.2024 07:55:33
- Source product-security@qualcomm.com
- Teams watchlist Login
- Open Login
Memory corruption in core services when Diag handler receives a command to configure event listeners.
Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Ar8035 Firmware Version-
Qualcomm ≫ Wcn6750 Firmware Version-
Qualcomm ≫ Wcn685x-5 Firmware Version-
Qualcomm ≫ Wcn685x-1 Firmware Version-
Qualcomm ≫ Wcn785x-1 Firmware Version-
Qualcomm ≫ Wcn785x-5 Firmware Version-
Qualcomm ≫ Qam8255p Firmware Version-
Qualcomm ≫ Qam8650p Firmware Version-
Qualcomm ≫ Qam8775p Firmware Version-
Qualcomm ≫ Qamsrv1h Firmware Version-
Qualcomm ≫ Qca6310 Firmware Version-
Qualcomm ≫ Qca6320 Firmware Version-
Qualcomm ≫ Qca6595 Firmware Version-
Qualcomm ≫ Qca6595au Firmware Version-
Qualcomm ≫ Qca6696 Firmware Version-
Qualcomm ≫ Qca6698aq Firmware Version-
Qualcomm ≫ Qca6797aq Firmware Version-
Qualcomm ≫ Qca8081 Firmware Version-
Qualcomm ≫ Qca8337 Firmware Version-
Qualcomm ≫ Qcc710 Firmware Version-
Qualcomm ≫ Qcm4490 Firmware Version-
Qualcomm ≫ Qcm8550 Firmware Version-
Qualcomm ≫ Qcn6024 Firmware Version-
Qualcomm ≫ Qcn6224 Firmware Version-
Qualcomm ≫ Qcn6274 Firmware Version-
Qualcomm ≫ Qcn9024 Firmware Version-
Qualcomm ≫ Qcs4490 Firmware Version-
Qualcomm ≫ Qcs8550 Firmware Version-
Qualcomm ≫ Qdu1000 Firmware Version-
Qualcomm ≫ Qdu1010 Firmware Version-
Qualcomm ≫ Qdu1110 Firmware Version-
Qualcomm ≫ Qdu1210 Firmware Version-
Qualcomm ≫ Qdx1010 Firmware Version-
Qualcomm ≫ Qdx1011 Firmware Version-
Qualcomm ≫ Qfw7114 Firmware Version-
Qualcomm ≫ Qfw7124 Firmware Version-
Qualcomm ≫ Qru1032 Firmware Version-
Qualcomm ≫ Qru1052 Firmware Version-
Qualcomm ≫ Qru1062 Firmware Version-
Qualcomm ≫ Sa8255p Firmware Version-
Qualcomm ≫ Sa8650p Firmware Version-
Qualcomm ≫ Sa9000p Firmware Version-
Qualcomm ≫ Sc8380xp Firmware Version-
Qualcomm ≫ Sd835 Firmware Version-
Qualcomm ≫ Sg8275p Firmware Version-
Qualcomm ≫ Sm8550p Firmware Version-
Qualcomm ≫ Snapdragon Ar2 Gen 1 Platform Firmware Version-
Qualcomm ≫ Snapdragon X70 Modem-rf System Firmware Version-
Qualcomm ≫ Srv1h Firmware Version-
Qualcomm ≫ Ssg2115p Firmware Version-
Qualcomm ≫ Ssg2125p Firmware Version-
Qualcomm ≫ Sxr1230p Firmware Version-
Qualcomm ≫ Sxr2230p Firmware Version-
Qualcomm ≫ Wcd9335 Firmware Version-
Qualcomm ≫ Wcd9340 Firmware Version-
Qualcomm ≫ Wcd9341 Firmware Version-
Qualcomm ≫ Wcd9370 Firmware Version-
Qualcomm ≫ Wcd9380 Firmware Version-
Qualcomm ≫ Wcd9385 Firmware Version-
Qualcomm ≫ Wcd9390 Firmware Version-
Qualcomm ≫ Wcd9395 Firmware Version-
Qualcomm ≫ Wcn3950 Firmware Version-
Qualcomm ≫ Wcn3988 Firmware Version-
Qualcomm ≫ Wcn3990 Firmware Version-
Qualcomm ≫ Wsa8810 Firmware Version-
Qualcomm ≫ Wsa8815 Firmware Version-
Qualcomm ≫ Wsa8830 Firmware Version-
Qualcomm ≫ Wsa8832 Firmware Version-
Qualcomm ≫ Wsa8835 Firmware Version-
Qualcomm ≫ Wsa8840 Firmware Version-
Qualcomm ≫ Wsa8845 Firmware Version-
Qualcomm ≫ Wsa8845h Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.134 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| product-security@qualcomm.com | 9 | 2.5 | 5.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.