Skip to main content

315 5g Iot Firmware CVE-2023-28573

HIGH
Improper Validation of Array Index (CWE-129)
2023-09-05 product-security@qualcomm.com
Buffer Overflow 315 5g Iot Firmware Aqt1000 Firmware Ar8035 Firmware Ar9380 Firmware Csr8811 Firmware Csrb31024 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Flight Rb5 5g Firmware Immersive Home 214 Firmware Immersive Home 216 Firmware Immersive Home 316 Firmware Immersive Home 318 Firmware Ipq5010 Firmware Ipq5028 Firmware Ipq6000 Firmware Ipq6010 Firmware Ipq6018 Firmware Ipq6028 Firmware Ipq8064 Firmware Ipq8065 Firmware Ipq8068 Firmware Ipq8070 Firmware Ipq8070a Firmware Ipq8071 Firmware Ipq8071a Firmware Ipq8072 Firmware Ipq8072a Firmware Ipq8074 Firmware Ipq8074a Firmware Ipq8076 Firmware Ipq8076a Firmware Ipq8078 Firmware Ipq8078a Firmware Ipq8173 Firmware Ipq8174 Firmware Ipq9008 Firmware Ipq9574 Firmware Pmp8074 Firmware Qam8255p Firmware Qam8295p Firmware Qca1062 Firmware Qca1064 Firmware Qca2062 Firmware Qca2064 Firmware Qca2065 Firmware Qca2066 Firmware Qca4024 Firmware Qca6391 Firmware Qca6420 Firmware Qca6421 Firmware Qca6426 Firmware Qca6430 Firmware Qca6431 Firmware Qca6436 Firmware Qca6554a Firmware Qca6564au Firmware Qca6574 Firmware Qca6574a Firmware Qca6574au Firmware Qca6584au Firmware Qca6595 Firmware Qca6595au Firmware Qca6678aq Firmware Qca6696 Firmware Qca6698aq Firmware Qca6797aq Firmware Qca8072 Firmware Qca8075 Firmware Qca8081 Firmware Qca8082 Firmware Qca8084 Firmware Qca8085 Firmware Qca8337 Firmware Qca8386 Firmware Qca9886 Firmware Qca9888 Firmware Qca9889 Firmware Qca9980 Firmware Qca9984 Firmware Qca9985 Firmware Qca9986 Firmware Qca9990 Firmware Qca9992 Firmware Qca9994 Firmware Qcm4490 Firmware Qcm6490 Firmware Qcn5021 Firmware Qcn5022 Firmware Qcn5024 Firmware Qcn5052 Firmware Qcn5054 Firmware Qcn5122 Firmware Qcn5124 Firmware Qcn5152 Firmware Qcn5154 Firmware Qcn5164 Firmware Qcn6023 Firmware Qcn6024 Firmware Qcn6100 Firmware Qcn6102 Firmware Qcn6112 Firmware Qcn6122 Firmware Qcn6132 Firmware Qcn9000 Firmware Qcn9001 Firmware Qcn9002 Firmware Qcn9003 Firmware Qcn9011 Firmware Qcn9012 Firmware Qcn9022 Firmware Qcn9024 Firmware Qcn9070 Firmware Qcn9072 Firmware Qcn9074 Firmware Qcn9100 Firmware Qcn9274 Firmware Qcs4490 Firmware Qcs6490 Firmware Qcs8250 Firmware Qcs8550 Firmware Qrb5165m Firmware Qrb5165n Firmware Qsm8250 Firmware Qsm8350 Firmware Robotics Rb5 Firmware Sa4150p Firmware Sa6145p Firmware Sa6150p Firmware Sa6155 Firmware Sa6155p Firmware Sa8145p Firmware Sa8150p Firmware Sa8155 Firmware Sa8155p Firmware Sa8195p Firmware Sa8255p Firmware Sa8295p Firmware Sc8180X Sdx55 Firmware Sd 8 Gen1 5g Firmware Sd865 5g Firmware Sd888 Firmware Sdx55 Firmware Sm7315 Firmware Sm7325p Firmware Snapdragon 778G 5G Firmware Snapdragon 780G 5G Firmware Snapdragon 782G Firmware Snapdragon 7C Gen 3 Firmware Snapdragon 8 Gen 1 Firmware Snapdragon 865 5G Firmware Snapdragon 870 5G Firmware Snapdragon 888 5G Firmware Sc8180x Ad Firmware Sc8180xp Ad Firmware Sc8180X Aa Firmware Sc8180X Ab Firmware Sc8180Xp Ac Firmware Sc8180Xp Af Firmware Sc8180X Ac Firmware Sc8180X Af Firmware Sc8180Xp Aa Firmware Sc8180Xp Ab Firmware Sc8280Xp Ab Firmware Sc8280Xp Bb Firmware Snapdragon Ar2 Gen 1 Firmware Snapdragon Auto 5G Firmware Snapdragon X55 5G Firmware Snapdragon X65 5G Firmware Snapdragon Xr2 5g Firmware Snapdragon Xr2 Gen 1 Firmware Snapdragon Auto 4g Firmware Ssg2115p Firmware Ssg2125p Firmware Sxr1230p Firmware Sxr2130 Firmware Sxr2230p Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9360 Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcn3950 Firmware Wcn3980 Firmware Wcn6740 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 05, 2023 - 07:15 nvd
HIGH 7.8

DescriptionNVD

Memory corruption in WLAN HAL while parsing WMI command parameters.

AnalysisAI

Memory corruption in WLAN HAL while parsing WMI command parameters. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-129. Memory corruption in WLAN HAL while parsing WMI command parameters. Affected products include: Qualcomm 315 5G Iot Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8035 Firmware, Qualcomm Ar9380 Firmware, Qualcomm Csr8811 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in 315 5g Iot Firmware

View all
CVE-2025-27061 HIGH
7.8 Jul 08

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the vid
CVE-2024-33060 HIGH
7.8 Sep 02

Memory corruption when two threads try to map and unmap a single node simultaneously. Rated high severity (CVSS 7.8), th
CVE-2023-28567 HIGH
7.8 Sep 05

Memory corruption in WLAN HAL while handling command through WMI interfaces. Rated high severity (CVSS 7.8), this vulner
CVE-2023-28542 HIGH
7.8 Jul 04

Memory Corruption in WLAN HOST while fetching TX status information. Rated high severity (CVSS 7.8), this vulnerability

CVE-2023-22667 HIGH
7.8 Jul 04

Memory Corruption in Audio while allocating the ion buffer during the music playback. Rated high severity (CVSS 7.8), th
CVE-2023-22387 HIGH
7.8 Jul 04

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. Rated high severity (CVSS

CVE-2025-21449 HIGH
7.5 Jul 08

Transient DOS may occur while processing malformed length field in SSID IEs.
CVE-2024-33051 HIGH
7.5 Sep 02

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. Rated high severity (CVSS 7.
CVE-2024-38426 MEDIUM
5.4 Mar 03

While processing the authentication message in UE, improper authentication may lead to information disclosure. Rated med

Same weakness CWE-129 – Improper Validation of Array Index

View all
CVE-2016-9053 CRITICAL POC
9.8
CVE-2020-27485 CRITICAL POC
9.9
CVE-2020-27483 CRITICAL POC
9.9
CVE-2024-24563 CRITICAL POC
9.8
CVE-2017-8797 HIGH
7.5
CVE-2018-11489 HIGH POC
8.8
CVE-2026-56770 HIGH POC
8.7
CVE-2017-7228 HIGH POC
8.2

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2023-28573 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy