CVEvulnerability

CVE-2023-28579

7.8 HIGH Published 2023-12-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Affected configurations

• qualcomm fastconnect 6900 firmware • qualcomm fastconnect 7800 firmware • qualcomm qam8295p firmware • qualcomm qca6391 firmware • qualcomm qca6574au firmware • qualcomm qca6595au firmware • qualcomm qca6696 firmware • qualcomm qcs410 firmware • qualcomm qcs610 firmware • qualcomm video collaboration vc1 platform firmware • qualcomm video collaboration vc3 platform firmware • qualcomm sa6145p firmware • qualcomm sa6150p firmware • qualcomm sa6155p firmware • qualcomm sa8145p firmware • qualcomm sa8150p firmware • qualcomm sa8155p firmware • qualcomm sa8195p firmware • qualcomm sa8295p firmware • qualcomm snapdragon 8 gen 1 mobile platform firmware • qualcomm sw5100 firmware • qualcomm sw5100p firmware • qualcomm wcd9341 firmware • qualcomm wcd9370 firmware • qualcomm wcd9380 firmware • qualcomm wcn3660b firmware • qualcomm wcn3680b firmware • qualcomm wcn3950 firmware • qualcomm wcn3980 firmware • qualcomm wcn3988 firmware • qualcomm wsa8810 firmware • qualcomm wsa8815 firmware • qualcomm wsa8830 firmware • qualcomm wsa8835 firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References