Skip to main content

Ar8035 Firmware CVE-2023-21658

HIGH
Buffer Over-read (CWE-126)
2023-06-06 product-security@qualcomm.com
Buffer Overflow Ar8035 Firmware Ar9380 Firmware Csr8811 Firmware Wcn6750 Firmware Qca6390 Firmware Wcn685X 5 Firmware Wcn685X 1 Firmware Wcn785X 1 Firmware Wcn785X 5 Firmware Immersive Home 214 Platform Firmware Immersive Home 216 Platform Firmware Immersive Home 316 Platform Firmware Immersive Home 318 Platform Firmware Ipq5010 Firmware Ipq5028 Firmware Ipq6000 Firmware Ipq6010 Firmware Ipq6018 Firmware Ipq6028 Firmware Ipq8064 Firmware Ipq8065 Firmware Ipq8068 Firmware Ipq8070a Firmware Ipq8071a Firmware Ipq8072a Firmware Ipq8074a Firmware Ipq8076 Firmware Ipq8076a Firmware Ipq8078 Firmware Ipq8078a Firmware Ipq8173 Firmware Ipq8174 Firmware Ipq9008 Firmware Ipq9574 Firmware Qam8255p Firmware Qam8295p Firmware Qam8650p Firmware Qam8775p Firmware Qca2062 Firmware Qca2064 Firmware Qca2065 Firmware Qca2066 Firmware Qca4024 Firmware Qca6391 Firmware Qca6426 Firmware Qca6436 Firmware Qca6554a Firmware Qca6564au Firmware Qca6574 Firmware Qca6574a Firmware Qca6574au Firmware Qca6584au Firmware Qca6595 Firmware Qca6595au Firmware Qca6678aq Firmware Qca6696 Firmware Qca6698aq Firmware Qca6797aq Firmware Qca8072 Firmware Qca8075 Firmware Qca8081 Firmware Qca8082 Firmware Qca8084 Firmware Qca8085 Firmware Qca8337 Firmware Qca8386 Firmware Qca9886 Firmware Qca9888 Firmware Qca9889 Firmware Qca9980 Firmware Qca9984 Firmware Qca9985 Firmware Qca9986 Firmware Qca9990 Firmware Qca9992 Firmware Qca9994 Firmware Qcc2073 Firmware Qcc2076 Firmware Qcm4490 Firmware Qcm6490 Firmware Qcn5022 Firmware Qcn5024 Firmware Qcn5052 Firmware Qcn5054 Firmware Qcn5122 Firmware Qcn5124 Firmware Qcn5152 Firmware Qcn5154 Firmware Qcn5164 Firmware Qcn6023 Firmware Qcn6024 Firmware Qcn6100 Firmware Qcn6102 Firmware Qcn6112 Firmware Qcn6122 Firmware Qcn6132 Firmware Qcn9000 Firmware Qcn9001 Firmware Qcn9002 Firmware Qcn9003 Firmware Qcn9022 Firmware Qcn9024 Firmware Qcn9070 Firmware Qcn9072 Firmware Qcn9074 Firmware Qcn9100 Firmware Qcn9274 Firmware Qcs4490 Firmware Qcs6490 Firmware Qcs8550 Firmware Qsm8350 Firmware Sa8255p Firmware Sa8295p Firmware Sd 8 Gen1 5g Firmware Sd865 5g Firmware Sd888 Firmware Sdm429w Firmware Sdm429 Firmware Sm7350 Ab Firmware Sm8450 Firmware Sm8475 Firmware Sm8250 Firmware Sm8250 Ab Firmware Sm8250 Ac Firmware Sm8350 Firmware Sm8350 Ac Firmware Sc8280Xp Ab Firmware Sc8280Xp Bb Firmware Snapdragon Ar2 Gen 1 Platform Firmware Snapdragon Auto 5g Modem Rf Firmware Snapdragon X55 5g Modem Rf System Firmware Snapdragon X65 5g Modem Rf System Firmware Snapdragon Xr2 5g Platform Firmware Ssg2115p Firmware Ssg2125p Firmware Sxr1230p Firmware Sxr2130 Firmware Sxr2230p Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcn3620 Firmware Wcn3660b Firmware Wcn3950 Firmware Wcn6740 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 06, 2023 - 08:15 nvd
HIGH 7.5

DescriptionNVD

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

AnalysisAI

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-126. Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. Affected products include: Qualcomm Ar8035 Firmware, Qualcomm Ar9380 Firmware, Qualcomm Csr8811 Firmware, Qualcomm Wcn6750 Firmware, Qualcomm Qca6390 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2026-21385 HIGH POC
7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2023-33025 CRITICAL
9.8 Jan 02

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Rated critical severity (CVSS 9.8), t

CVE-2024-21480 CRITICAL
9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul

CVE-2024-21473 CRITICAL
9.8 Apr 01

Memory corruption while redirecting log file to any file location with any file name. Rated critical severity (CVSS 9.8)

CVE-2024-21463 CRITICAL
9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-33083 CRITICAL
9.8 Dec 05

Memory corruption in WLAN Host while processing RRM beacon on the AP. Rated critical severity (CVSS 9.8), this vulnerabi

CVE-2023-33082 CRITICAL
9.8 Dec 05

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. Rated critical seve

CVE-2023-33045 CRITICAL
9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity

CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-33028 CRITICAL
9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln

CVE-2023-24855 CRITICAL
9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s

CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

Share

CVE-2023-21658 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy