Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-28582

Buffer Copy Without Checking Size of Input in Data Modem

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • AR8035affected
  • FastConnect 6700affected
  • FastConnect 6900affected
  • FastConnect 7800affected
  • QCA6584AUaffected
  • QCA6698AQaffected
  • QCA8081affected
  • QCA8337affected
  • QCC710affected
  • QCM4490affected
  • QCM8550affected
  • QCN6024affected
  • QCN6224affected
  • QCN6274affected
  • QCN9024affected
  • QCS4490affected
  • QFW7114affected
  • QFW7124affected
  • SM8550Paffected
  • Snapdragon 4 Gen 2 Mobile Platformaffected
  • Snapdragon 8 Gen 2 Mobile Platformaffected
  • Snapdragon 8 Gen 3 Mobile Platformaffected
  • Snapdragon 8+ Gen 2 Mobile Platformaffected
  • Snapdragon Auto 5G Modem-RF Gen 2affected
  • Snapdragon X65 5G Modem-RF Systemaffected
  • Snapdragon X70 Modem-RF Systemaffected
  • Snapdragon X75 5G Modem-RF Systemaffected
  • WCD9340affected
  • WCD9370affected
  • WCD9380affected
  • WCD9385affected
  • WCD9390affected
  • WCD9395affected
  • WCN3950affected
  • WCN3988affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8832affected
  • WSA8835affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected

References