CVE-2023-28582

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6584AU; QCA6698AQ; QCA8081; QCA8337; QCC710; QCM4490; QCM8550; QCN6024; QCN6224; QCN6274; QCN9024; QCS4490; QFW7114; QFW7124; SM8550P; Snapdragon 4 Gen 2 Mobile Platform
qualcommar8035_firmware<= *
qualcommfastconnect_6700_firmware<= *
qualcommfastconnect_6900_firmware<= *
qualcommfastconnect_7800_firmware<= *
qualcommqca6584au_firmware<= *
qualcommqca6698aq_firmware<= *
qualcommqca8081_firmware<= *
qualcommqca8337_firmware<= *
qualcommqcc710_firmware<= *
qualcommqcm4490_firmware<= *
qualcommqcm8550_firmware<= *
qualcommqcn6024_firmware<= *
qualcommqcn6224_firmware<= *
qualcommqcn6274_firmware<= *
qualcommqcn9024_firmware<= *
qualcommqcs4490_firmware<= *
qualcommqfw7114_firmware<= *
qualcommqfw7124_firmware<= *
qualcommsm8550p_firmware<= *
qualcommsnapdragon_4_gen_2_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_2_mobile_platform_firmware<= *
qualcommsnapdragon_8_gen_3_mobile_platform_firmware<= *
qualcommsnapdragon_auto_5g_modem-rf_gen_2_firmware<= *
qualcommsnapdragon_x65_5g_modem-rf_system_firmware<= *
qualcommsnapdragon_x70_modem-rf_system_firmware<= *
qualcommsnapdragon_x75_5g_modem-rf_system_firmware<= *
qualcommwcd9340_firmware<= *
qualcommwcd9370_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcd9385_firmware<= *
qualcommwcd9390_firmware<= *
qualcommwcd9395_firmware<= *
qualcommwcn3950_firmware<= *
qualcommwcn3988_firmware<= *
qualcommwsa8810_firmware<= *
qualcommwsa8815_firmware<= *
qualcommwsa8830_firmware<= *
qualcommwsa8832_firmware<= *
qualcommwsa8835_firmware<= *
qualcommwsa8840_firmware<= *
qualcommwsa8845_firmware<= *
qualcommwsa8845h_firmware<= *

References

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-285837.8Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.CVE-2023-285847.5Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).CVE-2023-285858.8Memory corruption while loading an ELF segment in TEE Kernel.CVE-2023-285866.5Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.CVE-2023-285877.8Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.CVE-2023-285887.5Transient DOS in Bluetooth Host while rfc slot allocation.CVE-2023-28598.8Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.CVE-2023-285967.8Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged uCVE-2023-285977.5Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB CVE-2023-285986.5Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could rCVE-2023-285994.3Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentiaCVE-2023-28604.4An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of se
CVE-2023-28582: Critical severity, CVSS 9.8 | Vulnix