Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-28579

Buffer Copy Without Checking Size of Input in WLAN Host

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6900affected
  • FastConnect 7800affected
  • QAM8295Paffected
  • QCA6391affected
  • QCA6574AUaffected
  • QCA6595AUaffected
  • QCA6696affected
  • QCS410affected
  • QCS610affected
  • Qualcomm Video Collaboration VC1 Platformaffected
  • Qualcomm Video Collaboration VC3 Platformaffected
  • SA6145Paffected
  • SA6150Paffected
  • SA6155Paffected
  • SA8145Paffected
  • SA8150Paffected
  • SA8155Paffected
  • SA8195Paffected
  • SA8295Paffected
  • Snapdragon 8 Gen 1 Mobile Platformaffected
  • SW5100affected
  • SW5100Paffected
  • WCD9341affected
  • WCD9370affected
  • WCD9380affected
  • WCN3660Baffected
  • WCN3680Baffected
  • WCN3950affected
  • WCN3980affected
  • WCN3988affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8835affected

References