CVE-2023-22386

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; CSR8811; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; IPQ5010; IPQ5028; IPQ6000; IPQ6010; IPQ6018; IPQ6028
qualcommar8035_firmware<= *
qualcommcsr8811_firmware<= *
qualcommcsra6620_firmware<= *
qualcommcsra6640_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6800_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommflight_rb5_5g_platform_firmware<= *
qualcommimmersive_home_214_platform_firmware<= *
qualcommimmersive_home_216_platform_firmware<= *
qualcommimmersive_home_316_platform_firmware<= *
qualcommimmersive_home_318_platform_firmware<= *
qualcommipq5010_firmware<= *
qualcommipq5028_firmware<= *
qualcommipq6000_firmware<= *
qualcommipq6010_firmware<= *
qualcommipq6018_firmware<= *
qualcommipq6028_firmware<= *
qualcommipq8070a_firmware<= *
qualcommipq8071a_firmware<= *
qualcommipq8072a_firmware<= *
qualcommipq8074a_firmware<= *
qualcommipq8076_firmware<= *
qualcommipq8076a_firmware<= *
qualcommipq8078_firmware<= *
qualcommipq8078a_firmware<= *
qualcommipq8173_firmware<= *
qualcommipq8174_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9574_firmware<= *
qualcommqam8255p_firmware<= *
qualcommqam8295p_firmware<= *
qualcommqam8650p_firmware<= *
qualcommqam8775p_firmware<= *
qualcommqca4024_firmware<= *
qualcommqca6174a_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6421_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6431_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6554a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6584au_firmware<= *

References

Timeline

Published
Jul 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-223877.8Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.CVE-2023-223889.8Memory Corruption in Multi-mode Call Processor while processing bit mask API.CVE-2023-223896.5Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via CVE-2023-22396.5Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.CVE-2023-223906.5Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to pCVE-2023-223917.5A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticateCVE-2023-223926.5A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allowsCVE-2023-223937.5An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS EvolCVE-2023-223947.5An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX SeCVE-2023-223956.5A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjCVE-2023-223967.5An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unautCVE-2023-223976.1An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine (PFE) on Juniper N
CVE-2023-22386: High severity, CVSS 7.8 | Vulnix