CVE-2023-28582

EPSS 0.44%
Veröffentlicht 04.03.2024 11:15:09
Zuletzt bearbeitet 10.01.2025 17:46:49
Erkennungen
Login

Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 4

NVD 43 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Ar8035 Firmware Version -

Qualcomm ≫ Ar8035 Version -

Qualcomm ≫ Fastconnect 6700 Firmware Version -

Qualcomm ≫ Fastconnect 6700 Version -

Qualcomm ≫ Fastconnect 6900 Firmware Version -

Qualcomm ≫ Fastconnect 6900 Version -

Qualcomm ≫ Fastconnect 7800 Firmware Version -

Qualcomm ≫ Fastconnect 7800 Version -

Qualcomm ≫ Qca6584au Firmware Version -

Qualcomm ≫ Qca6584au Version -

Qualcomm ≫ Qca6698aq Firmware Version -

Qualcomm ≫ Qca6698aq Version -

Qualcomm ≫ Qca8081 Firmware Version -

Qualcomm ≫ Qca8081 Version -

Qualcomm ≫ Qca8337 Firmware Version -

Qualcomm ≫ Qca8337 Version -

Qualcomm ≫ Qcc710 Firmware Version -

Qualcomm ≫ Qcc710 Version -

Qualcomm ≫ Qcm4490 Firmware Version -

Qualcomm ≫ Qcm4490 Version -

Qualcomm ≫ Qcm8550 Firmware Version -

Qualcomm ≫ Qcm8550 Version -

Qualcomm ≫ Qcn6024 Firmware Version -

Qualcomm ≫ Qcn6024 Version -

Qualcomm ≫ Qcn6224 Firmware Version -

Qualcomm ≫ Qcn6224 Version -

Qualcomm ≫ Qcn6274 Firmware Version -

Qualcomm ≫ Qcn6274 Version -

Qualcomm ≫ Qcn9024 Firmware Version -

Qualcomm ≫ Qcn9024 Version -

Qualcomm ≫ Qcs4490 Firmware Version -

Qualcomm ≫ Qcs4490 Version -

Qualcomm ≫ Qfw7114 Firmware Version -

Qualcomm ≫ Qfw7114 Version -

Qualcomm ≫ Qfw7124 Firmware Version -

Qualcomm ≫ Qfw7124 Version -

Qualcomm ≫ Sm8550p Firmware Version -

Qualcomm ≫ Sm8550p Version -

Qualcomm ≫ Snapdragon 4 Gen 2 Mobile Firmware Version -

Qualcomm ≫ Snapdragon 4 Gen 2 Mobile Version -

Qualcomm ≫ Snapdragon 8 Gen 2 Mobile Firmware Version -

Qualcomm ≫ Snapdragon 8 Gen 2 Mobile Version -

Qualcomm ≫ Snapdragon 8 Gen 3 Mobile Firmware Version -

Qualcomm ≫ Snapdragon 8 Gen 3 Mobile Version -

Qualcomm ≫ Snapdragon 8+ Gen 2 Mobile Firmware Version -

Qualcomm ≫ Snapdragon 8+ Gen 2 Mobile Version -

Qualcomm ≫ Snapdragon Auto 5g Modem-rf Gen 2 Firmware Version -

Qualcomm ≫ Snapdragon Auto 5g Modem-rf Gen 2 Version -

Qualcomm ≫ Snapdragon X65 5g Modem-rf Firmware Version -

Qualcomm ≫ Snapdragon X65 5g Modem-rf Version -

Qualcomm ≫ Snapdragon X70 Modem-rf Firmware Version -

Qualcomm ≫ Snapdragon X70 Modem-rf Version -

Qualcomm ≫ Snapdragon X75 5g Modem-rf Firmware Version -

Qualcomm ≫ Snapdragon X75 5g Modem-rf Version -

Qualcomm ≫ Wcd9340 Firmware Version -

Qualcomm ≫ Wcd9340 Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wcd9390 Firmware Version -

Qualcomm ≫ Wcd9390 Version -

Qualcomm ≫ Wcd9395 Firmware Version -

Qualcomm ≫ Wcd9395 Version -

Qualcomm ≫ Wcn3950 Firmware Version -

Qualcomm ≫ Wcn3950 Version -

Qualcomm ≫ Wcn3988 Firmware Version -

Qualcomm ≫ Wcn3988 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830 Version -

Qualcomm ≫ Wsa8832 Firmware Version -

Qualcomm ≫ Wsa8832 Version -

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835 Version -

Qualcomm ≫ Wsa8840 Firmware Version -

Qualcomm ≫ Wsa8840 Version -

Qualcomm ≫ Wsa8845 Firmware Version -

Qualcomm ≫ Wsa8845 Version -

Qualcomm ≫ Wsa8845h Firmware Version -

Qualcomm ≫ Wsa8845h Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.44%	0.349

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Qualcomm	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-28582

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-28582

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-28582

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-28582