CVE-2023-28554 — Buffer Over-read in Qualcomm IPC

Back Back to CVE browser

MEDIUM

Buffer Over-read in Qualcomm IPC

Published Nov 7, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
- Version
  AQT1000
  Status
  affected
  Constraints
  -
- Version
  AR9380
  Status
  affected
  Constraints
  -
- Version
  C-V2X 9150
  Status
  affected
  Constraints
  -
- Version
  CSR8811
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6200
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6800
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6900
  Status
  affected
  Constraints
  -
- Version
  FastConnect 7800
  Status
  affected
  Constraints
  -
- Version
  IPQ4019
  Status
  affected
  Constraints
  -
- Version
  IPQ4028
  Status
  affected
  Constraints
  -
- Version
  IPQ4029
  Status
  affected
  Constraints
  -
- Version
  IPQ5010
  Status
  affected
  Constraints
  -
- Version
  IPQ5028
  Status
  affected
  Constraints
  -
- Version
  IPQ6010
  Status
  affected
  Constraints
  -
- Version
  IPQ6018
  Status
  affected
  Constraints
  -
- Version
  IPQ6028
  Status
  affected
  Constraints
  -
- Version
  IPQ8064
  Status
  affected
  Constraints
  -
- Version
  IPQ8065
  Status
  affected
  Constraints
  -
- Version
  IPQ8068
  Status
  affected
  Constraints
  -
- Version
  IPQ8070A
  Status
  affected
  Constraints
  -
- Version
  IPQ8071A
  Status
  affected
  Constraints
  -
- Version
  IPQ8072A
  Status
  affected
  Constraints
  -
- Version
  IPQ8074A
  Status
  affected
  Constraints
  -
- Version
  IPQ8076
  Status
  affected
  Constraints
  -
- Version
  IPQ8076A
  Status
  affected
  Constraints
  -
- Version
  IPQ8078
  Status
  affected
  Constraints
  -
- Version
  IPQ8078A
  Status
  affected
  Constraints
  -
- Version
  IPQ8173
  Status
  affected
  Constraints
  -
- Version
  IPQ8174
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 214 Platform
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 216 Platform
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 316 Platform
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 318 Platform
  Status
  affected
  Constraints
  -
- Version
  PMP8074
  Status
  affected
  Constraints
  -
- Version
  QAM8255P
  Status
  affected
  Constraints
  -
- Version
  QAM8295P
  Status
  affected
  Constraints
  -
- Version
  QCA4024
  Status
  affected
  Constraints
  -
- Version
  QCA6310
  Status
  affected
  Constraints
  -
- Version
  QCA6320
  Status
  affected
  Constraints
  -
- Version
  QCA6391
  Status
  affected
  Constraints
  -
- Version
  QCA6420
  Status
  affected
  Constraints
  -
- Version
  QCA6426
  Status
  affected
  Constraints
  -
- Version
  QCA6430
  Status
  affected
  Constraints
  -
- Version
  QCA6436
  Status
  affected
  Constraints
  -
- Version
  QCA6554A
  Status
  affected
  Constraints
  -
- Version
  QCA6564AU
  Status
  affected
  Constraints
  -
- Version
  QCA6574
  Status
  affected
  Constraints
  -
- Version
  QCA6574A
  Status
  affected
  Constraints
  -
- Version
  QCA6574AU
  Status
  affected
  Constraints
  -
- Version
  QCA6584AU
  Status
  affected
  Constraints
  -
- Version
  QCA6595
  Status
  affected
  Constraints
  -
- Version
  QCA6595AU
  Status
  affected
  Constraints
  -
- Version
  QCA6696
  Status
  affected
  Constraints
  -
- Version
  QCA6698AQ
  Status
  affected
  Constraints
  -
- Version
  QCA6797AQ
  Status
  affected
  Constraints
  -
- Version
  QCA7500
  Status
  affected
  Constraints
  -
- Version
  QCA8072
  Status
  affected
  Constraints
  -
- Version
  QCA8075
  Status
  affected
  Constraints
  -
- Version
  QCA8081
  Status
  affected
  Constraints
  -
- Version
  QCA8337
  Status
  affected
  Constraints
  -
- Version
  QCA9880
  Status
  affected
  Constraints
  -
- Version
  QCA9886
  Status
  affected
  Constraints
  -
- Version
  QCA9888
  Status
  affected
  Constraints
  -
- Version
  QCA9889
  Status
  affected
  Constraints
  -
- Version
  QCA9898
  Status
  affected
  Constraints
  -
- Version
  QCA9980
  Status
  affected
  Constraints
  -
- Version
  QCA9984
  Status
  affected
  Constraints
  -
- Version
  QCA9985
  Status
  affected
  Constraints
  -
- Version
  QCA9990
  Status
  affected
  Constraints
  -
- Version
  QCA9992
  Status
  affected
  Constraints
  -
- Version
  QCA9994
  Status
  affected
  Constraints
  -
- Version
  QCN5021
  Status
  affected
  Constraints
  -
- Version
  QCN5022
  Status
  affected
  Constraints
  -
- Version
  QCN5024
  Status
  affected
  Constraints
  -
- Version
  QCN5052
  Status
  affected
  Constraints
  -
- Version
  QCN5054
  Status
  affected
  Constraints
  -
- Version
  QCN5122
  Status
  affected
  Constraints
  -
- Version
  QCN5124
  Status
  affected
  Constraints
  -
- Version
  QCN5152
  Status
  affected
  Constraints
  -
- Version
  QCN5154
  Status
  affected
  Constraints
  -
- Version
  QCN5164
  Status
  affected
  Constraints
  -
- Version
  QCN6023
  Status
  affected
  Constraints
  -
- Version
  QCN6024
  Status
  affected
  Constraints
  -
- Version
  QCN6122
  Status
  affected
  Constraints
  -
- Version
  QCN6132
  Status
  affected
  Constraints
  -
- Version
  QCN9000
  Status
  affected
  Constraints
  -
- Version
  QCN9022
  Status
  affected
  Constraints
  -
- Version
  QCN9024
  Status
  affected
  Constraints
  -
- Version
  QCN9070
  Status
  affected
  Constraints
  -
- Version
  QCN9072
  Status
  affected
  Constraints
  -
- Version
  QCN9074
  Status
  affected
  Constraints
  -
- Version
  QCN9100
  Status
  affected
  Constraints
  -
- Version
  QCS410
  Status
  affected
  Constraints
  -
- Version
  QCS610
  Status
  affected
  Constraints
  -
- Version
  QCS8155
  Status
  affected
  Constraints
  -
- Version
  QSM8250
  Status
  affected
  Constraints
  -
- Version
  Qualcomm 205 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Qualcomm 215 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Qualcomm Video Collaboration VC1 Platform
  Status
  affected
  Constraints
  -
- Version
  Qualcomm Video Collaboration VC3 Platform
  Status
  affected
  Constraints
  -
- Version
  SA6145P
  Status
  affected
  Constraints
  -
- Version
  SA6150P
  Status
  affected
  Constraints
  -
- Version
  SA6155P
  Status
  affected
  Constraints
  -
- Version
  SA8145P
  Status
  affected
  Constraints
  -
- Version
  SA8150P
  Status
  affected
  Constraints
  -
- Version
  SA8155P
  Status
  affected
  Constraints
  -
- Version
  SA8195P
  Status
  affected
  Constraints
  -
- Version
  SA8255P
  Status
  affected
  Constraints
  -
- Version
  SA8295P
  Status
  affected
  Constraints
  -
- Version
  SD835
  Status
  affected
  Constraints
  -
- Version
  SD855
  Status
  affected
  Constraints
  -
- Version
  SD865 5G
  Status
  affected
  Constraints
  -
- Version
  SDX55
  Status
  affected
  Constraints
  -
- Version
  SW5100
  Status
  affected
  Constraints
  -
- Version
  SW5100P
  Status
  affected
  Constraints
  -
- Version
  SXR2130
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 210 Processor
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 212 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 8 Gen 1 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 835 Mobile PC Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 855 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 855+/860 Mobile Platform (SM8150-AC)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 865 5G Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 870 5G Mobile Platform (SM8250-AC)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 888 5G Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
  Status
  affected
  Constraints
  -
- Version
  Snapdragon W5+ Gen 1 Wearable Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon Wear 4100+ Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon X55 5G Modem-RF System
  Status
  affected
  Constraints
  -
- Version
  Snapdragon XR2 5G Platform
  Status
  affected
  Constraints
  -
- Version
  WCD9335
  Status
  affected
  Constraints
  -
- Version
  WCD9340
  Status
  affected
  Constraints
  -
- Version
  WCD9341
  Status
  affected
  Constraints
  -
- Version
  WCD9370
  Status
  affected
  Constraints
  -
- Version
  WCD9380
  Status
  affected
  Constraints
  -
- Version
  WCD9385
  Status
  affected
  Constraints
  -
- Version
  WCN3610
  Status
  affected
  Constraints
  -
- Version
  WCN3660B
  Status
  affected
  Constraints
  -
- Version
  WCN3680B
  Status
  affected
  Constraints
  -
- Version
  WCN3950
  Status
  affected
  Constraints
  -
- Version
  WCN3980
  Status
  affected
  Constraints
  -
- Version
  WCN3988
  Status
  affected
  Constraints
  -
- Version
  WCN3990
  Status
  affected
  Constraints
  -
- Version
  WSA8810
  Status
  affected
  Constraints
  -
- Version
  WSA8815
  Status
  affected
  Constraints
  -
- Version
  WSA8830
  Status
  affected
  Constraints
  -
- Version
  WSA8835
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
AQT1000	affected	-
AR9380	affected	-
C-V2X 9150	affected	-
CSR8811	affected	-
FastConnect 6200	affected	-
FastConnect 6800	affected	-
FastConnect 6900	affected	-
FastConnect 7800	affected	-
IPQ4019	affected	-
IPQ4028	affected	-
IPQ4029	affected	-
IPQ5010	affected	-
IPQ5028	affected	-
IPQ6010	affected	-
IPQ6018	affected	-
IPQ6028	affected	-
IPQ8064	affected	-
IPQ8065	affected	-
IPQ8068	affected	-
IPQ8070A	affected	-
IPQ8071A	affected	-
IPQ8072A	affected	-
IPQ8074A	affected	-
IPQ8076	affected	-
IPQ8076A	affected	-
IPQ8078	affected	-
IPQ8078A	affected	-
IPQ8173	affected	-
IPQ8174	affected	-
Immersive Home 214 Platform	affected	-
Immersive Home 216 Platform	affected	-
Immersive Home 316 Platform	affected	-
Immersive Home 318 Platform	affected	-
PMP8074	affected	-
QAM8255P	affected	-
QAM8295P	affected	-
QCA4024	affected	-
QCA6310	affected	-
QCA6320	affected	-
QCA6391	affected	-
QCA6420	affected	-
QCA6426	affected	-
QCA6430	affected	-
QCA6436	affected	-
QCA6554A	affected	-
QCA6564AU	affected	-
QCA6574	affected	-
QCA6574A	affected	-
QCA6574AU	affected	-
QCA6584AU	affected	-
QCA6595	affected	-
QCA6595AU	affected	-
QCA6696	affected	-
QCA6698AQ	affected	-
QCA6797AQ	affected	-
QCA7500	affected	-
QCA8072	affected	-
QCA8075	affected	-
QCA8081	affected	-
QCA8337	affected	-
QCA9880	affected	-
QCA9886	affected	-
QCA9888	affected	-
QCA9889	affected	-
QCA9898	affected	-
QCA9980	affected	-
QCA9984	affected	-
QCA9985	affected	-
QCA9990	affected	-
QCA9992	affected	-
QCA9994	affected	-
QCN5021	affected	-
QCN5022	affected	-
QCN5024	affected	-
QCN5052	affected	-
QCN5054	affected	-
QCN5122	affected	-
QCN5124	affected	-
QCN5152	affected	-
QCN5154	affected	-
QCN5164	affected	-
QCN6023	affected	-
QCN6024	affected	-
QCN6122	affected	-
QCN6132	affected	-
QCN9000	affected	-
QCN9022	affected	-
QCN9024	affected	-
QCN9070	affected	-
QCN9072	affected	-
QCN9074	affected	-
QCN9100	affected	-
QCS410	affected	-
QCS610	affected	-
QCS8155	affected	-
QSM8250	affected	-
Qualcomm 205 Mobile Platform	affected	-
Qualcomm 215 Mobile Platform	affected	-
Qualcomm Video Collaboration VC1 Platform	affected	-
Qualcomm Video Collaboration VC3 Platform	affected	-
SA6145P	affected	-
SA6150P	affected	-
SA6155P	affected	-
SA8145P	affected	-
SA8150P	affected	-
SA8155P	affected	-
SA8195P	affected	-
SA8255P	affected	-
SA8295P	affected	-
SD835	affected	-
SD855	affected	-
SD865 5G	affected	-
SDX55	affected	-
SW5100	affected	-
SW5100P	affected	-
SXR2130	affected	-
Snapdragon 210 Processor	affected	-
Snapdragon 212 Mobile Platform	affected	-
Snapdragon 8 Gen 1 Mobile Platform	affected	-
Snapdragon 835 Mobile PC Platform	affected	-
Snapdragon 855 Mobile Platform	affected	-
Snapdragon 855+/860 Mobile Platform (SM8150-AC)	affected	-
Snapdragon 865 5G Mobile Platform	affected	-
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)	affected	-
Snapdragon 870 5G Mobile Platform (SM8250-AC)	affected	-
Snapdragon 888 5G Mobile Platform	affected	-
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)	affected	-
Snapdragon W5+ Gen 1 Wearable Platform	affected	-
Snapdragon Wear 4100+ Platform	affected	-
Snapdragon X55 5G Modem-RF System	affected	-
Snapdragon XR2 5G Platform	affected	-
WCD9335	affected	-
WCD9340	affected	-
WCD9341	affected	-
WCD9370	affected	-
WCD9380	affected	-
WCD9385	affected	-
WCN3610	affected	-
WCN3660B	affected	-
WCN3680B	affected	-
WCN3950	affected	-
WCN3980	affected	-
WCN3988	affected	-
WCN3990	affected	-
WSA8810	affected	-
WSA8815	affected	-
WSA8830	affected	-
WSA8835	affected	-

Remediation

No remediation recorded yet.

Metrics

0.14% 0.00138

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00138

Score over time

2023–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.14% (0.00138)	2.65th	v5 (v2026.06.15)
Jun 15, 2026	0.14% (0.00138)	3.44th	v5 (v2026.06.15)
Mar 17, 2025	0.04% (0.00037)	7.96th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Nov 7, 2023	0.04% (0.00043)	7.33th	v3 (v2023.03.01)

Weaknesses (1)

CWE-126

References (1)

https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin
PatchVendor Advisory

Link	Providers	Tags
https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published Nov 7, 2023

Updated Aug 2, 2024

Reserved Mar 17, 2023

Link CVE-2023-28554

CISA Vulnrichment

Updated Jul 11, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-28554

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-28554