CVE-2023-28562

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while handling payloads from remote ESL.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAQT1000; FastConnect 6200; FastConnect 6800; QCA6391; QCA6420; QCA6430; QCN7606; QCS410; QCS610; SC8180X+SDX55; SD460; SD662; SD730; SD855; SDX55; SM4125; SM6250; SM6250P; SM7250P; Snapdragon 460 Mobile Platform

References

Timeline

Published
Sep 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-285635.5Information disclosure in IOE Firmware while handling WMI command.CVE-2023-285647.8Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.CVE-2023-285657.8Memory corruption in WLAN HAL while handling command streams through WMI interfaces.CVE-2023-285665.5Information disclosure in WLAN HAL while handling the WMI state info command.CVE-2023-285677.8Memory corruption in WLAN HAL while handling command through WMI interfaces.CVE-2023-285685.5Information disclosure in WLAN HAL when reception status handler is called.CVE-2023-285695.5Information disclosure in WLAN HAL while handling command through WMI interfaces.CVE-2023-28576.5BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture fileCVE-2023-285707.8Memory corruption while processing audio effects.CVE-2023-285715.5Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.CVE-2023-285728.8Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.CVE-2023-285737.8Memory corruption in WLAN HAL while parsing WMI command parameters.