Name: Vulnix
Price: 99 USD

Description

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6800; FastConnect 6900; Flight RB5 5G Platform; QCA6391; QCA6420; QCA6421; QCA6426; QCA6430; QCA6431; QCA6436; QCM2290; QCM4290; QCN9074; QCS2290; QCS4290; QCS8250; QRB5165M; QRB5165N
qualcomm	aqt1000_firmware	<= *
qualcomm	fastconnect_6200_firmware	<= *
qualcomm	fastconnect_6800_firmware	<= *
qualcomm	fastconnect_6900_firmware	<= *
qualcomm	flight_rb5_5g_platform_firmware	<= *
qualcomm	qca6391_firmware	<= *
qualcomm	qca6420_firmware	<= *
qualcomm	qca6421_firmware	<= *
qualcomm	qca6426_firmware	<= *
qualcomm	qca6430_firmware	<= *
qualcomm	qca6431_firmware	<= *
qualcomm	qca6436_firmware	<= *
qualcomm	qcm2290_firmware	<= *
qualcomm	qcm4290_firmware	<= *
qualcomm	qcn9074_firmware	<= *
qualcomm	qcs2290_firmware	<= *
qualcomm	qcs4290_firmware	<= *
qualcomm	qcs8250_firmware	<= *
qualcomm	qrb5165m_firmware	<= *
qualcomm	qrb5165n_firmware	<= *
qualcomm	robotics_rb5_platform_firmware	<= *
qualcomm	sd660_firmware	<= *
qualcomm	sd730_firmware	<= *
qualcomm	sd855_firmware	<= *
qualcomm	sd865_5g_firmware	<= *
qualcomm	sdm429w_firmware	<= *
qualcomm	sdx55_firmware	<= *
qualcomm	sm6250_firmware	<= *
qualcomm	snapdragon_429_mobile_platform_firmware	<= *
qualcomm	snapdragon_660_mobile_platform_firmware	<= *
qualcomm	snapdragon_675_mobile_platform_firmware	<= *
qualcomm	snapdragon_720g_mobile_platform_firmware	<= *
qualcomm	snapdragon_855_mobile_platform_firmware	<= *
qualcomm	snapdragon_865_5g_mobile_platform_firmware	<= *
qualcomm	snapdragon_x50_5g_modem-rf_system_firmware	<= *
qualcomm	snapdragon_x55_5g_modem-rf_system_firmware	<= *
qualcomm	snapdragon_xr2_5g_platform_firmware	<= *
qualcomm	sxr2130_firmware	<= *
qualcomm	wcd9335_firmware	<= *
qualcomm	wcd9341_firmware	<= *
qualcomm	wcd9370_firmware	<= *
qualcomm	wcd9375_firmware	<= *
qualcomm	wcd9380_firmware	<= *
qualcomm	wcd9385_firmware	<= *
qualcomm	wcn3620_firmware	<= *
qualcomm	wcn3660b_firmware	<= *
qualcomm	wcn3910_firmware	<= *
qualcomm	wcn3950_firmware	<= *
qualcomm	wcn3980_firmware	<= *

References

https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletinPatch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletinPatch, Vendor Advisory

Timeline

Published: Jun 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

CVE-2023-21669