CVE-2023-28572
6.6
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | CSRB31024 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6800 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | affected |
| Qualcomm, Inc. | Snapdragon | MDM9628 | affected |
| Qualcomm, Inc. | Snapdragon | MSM8996AU | affected |
| Qualcomm, Inc. | Snapdragon | QAM8295P | affected |
| Qualcomm, Inc. | Snapdragon | QCA6174A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6175A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6391 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6421 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6426 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6431 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6436 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6554A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6564A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6564AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6584AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6678AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA6696 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6698AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA9377 | affected |
| Qualcomm, Inc. | Snapdragon | QCA9379 | affected |
| Qualcomm, Inc. | Snapdragon | QCC2073 | affected |
| Qualcomm, Inc. | Snapdragon | QCC2076 | affected |
| Qualcomm, Inc. | Snapdragon | SA6145P | affected |
| Qualcomm, Inc. | Snapdragon | SA6150P | affected |
| Qualcomm, Inc. | Snapdragon | SA6155P | affected |
| Qualcomm, Inc. | Snapdragon | SA8145P | affected |
| Qualcomm, Inc. | Snapdragon | SA8150P | affected |
| Qualcomm, Inc. | Snapdragon | SA8155P | affected |
| Qualcomm, Inc. | Snapdragon | SA8195P | affected |
| Qualcomm, Inc. | Snapdragon | SA8295P | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 820 Automotive Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 865 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 865+ 5G Mobile Platform (SM8250-AB) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 870 5G Mobile Platform (SM8250-AC) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 5G Modem-RF | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon X55 5G Modem-RF System | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 4G Modem | affected |
| Qualcomm, Inc. | Snapdragon | SW5100 | affected |
| Qualcomm, Inc. | Snapdragon | SW5100P | affected |
| Qualcomm, Inc. | Snapdragon | WCD9380 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9385 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3980 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3988 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8810 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8815 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8830 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8835 | affected |
Weaknesses
- CWE-126: CWE-126 Buffer Over-read
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.