CVE-2023-28564 - Use of Out-of-range Pointer Offset in WLAN HAL

Back Back to CVE browser

HIGH

Use of Out-of-range Pointer Offset in WLAN HAL

Published Sep 5, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.12%

Description

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
Affected
- AQT1000
- AR8031
- AR9380
- CSR8811
- CSRA6620
- CSRA6640
- CSRB31024
- FastConnect 6200
- FastConnect 6700
- FastConnect 6800
- FastConnect 6900
- Home Hub 100 Platform
- IPQ4018
- IPQ4019
- IPQ4028
- IPQ4029
- IPQ5010
- IPQ5028
- IPQ6000
- IPQ6005
- IPQ6010
- IPQ6018
- IPQ6028
- IPQ8064
- IPQ8065
- IPQ8068
- IPQ8069
- IPQ8070
- IPQ8070A
- IPQ8071
- IPQ8071A
- IPQ8072
- IPQ8072A
- IPQ8074
- IPQ8074A
- IPQ8076
- IPQ8076A
- IPQ8078
- IPQ8078A
- IPQ8173
- IPQ8174
- Immersive Home 214 Platform
- Immersive Home 216 Platform
- Immersive Home 316 Platform
- Immersive Home 318 Platform
- MDM9250
- MDM9628
- MDM9640
- MDM9650
- MSM8996AU
- QAM8295P
- QCA4024
- QCA6174A
- QCA6175A
- QCA6310
- QCA6320
- QCA6335
- QCA6391
- QCA6420
- QCA6428
- QCA6430
- QCA6438
- QCA6554A
- QCA6564
- QCA6564A
- QCA6564AU
- QCA6574
- QCA6574A
- QCA6574AU
- QCA6584AU
- QCA6595
- QCA6595AU
- QCA6696
- QCA6698AQ
- QCA7500
- QCA8075
- QCA8081
- QCA9377
- QCA9531
- QCA9558
- QCA9561
- QCA9880
- QCA9882
- QCA9886
- QCA9887
- QCA9888
- QCA9889
- QCA9898
- QCA9980
- QCA9982
- QCA9984
- QCA9985
- QCA9986
- QCA9987
- QCA9990
- QCA9992
- QCA9994
- QCM2290
- QCM4290
- QCM4325
- QCM4490
- QCM6125
- QCN5021
- QCN5022
- QCN5024
- QCN5052
- QCN5054
- QCN5064
- QCN5121
- QCN5122
- QCN5124
- QCN5152
- QCN5154
- QCN5164
- QCN5550
- QCN6023
- QCN6024
- QCN6122
- QCN6132
- QCN7605
- QCN7606
- QCN9000
- QCN9012
- QCN9022
- QCN9024
- QCN9070
- QCN9072
- QCN9074
- QCN9100
- QCS2290
- QCS410
- QCS4290
- QCS4490
- QCS610
- QCS6125
- QFE1922
- QFE1952
- Robotics RB3 Platform
- SA4150P
- SA4155P
- SA6145P
- SA6150P
- SA6155
- SA6155P
- SA8145P
- SA8150P
- SA8155
- SA8155P
- SA8195P
- SA8295P
- SC8180X+SDX55
- SD 455
- SD 675
- SD 8CX
- SD460
- SD660
- SD662
- SD670
- SD675
- SD730
- SD835
- SD855
- SDX20M
- SDX55
- SG4150P
- SM4125
- SM4450
- SM6250
- SM6250P
- SM7250P
- SW5100
- SW5100P
- SXR1120
- Smart Audio 400 Platform
- Snapdragon 4 Gen 1 Mobile Platform
- Snapdragon 460 Mobile Platform
- Snapdragon 480 5G Mobile Platform
- Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
- Snapdragon 630 Mobile Platform
- Snapdragon 636 Mobile Platform
- Snapdragon 660 Mobile Platform
- Snapdragon 662 Mobile Platform
- Snapdragon 665 Mobile Platform
- Snapdragon 670 Mobile Platform
- Snapdragon 675 Mobile Platform
- Snapdragon 678 Mobile Platform (SM6150-AC)
- Snapdragon 680 4G Mobile Platform
- Snapdragon 685 4G Mobile Platform (SM6225-AD)
- Snapdragon 690 5G Mobile Platform
- Snapdragon 695 5G Mobile Platform
- Snapdragon 710 Mobile Platform
- Snapdragon 712 Mobile Platform
- Snapdragon 720G Mobile Platform
- Snapdragon 730 Mobile Platform (SM7150-AA)
- Snapdragon 730G Mobile Platform (SM7150-AB)
- Snapdragon 732G Mobile Platform (SM7150-AC)
- Snapdragon 750G 5G Mobile Platform
- Snapdragon 765 5G Mobile Platform (SM7250-AA)
- Snapdragon 765G 5G Mobile Platform (SM7250-AB)
- Snapdragon 768G 5G Mobile Platform (SM7250-AC)
- Snapdragon 7c Compute Platform (SC7180-AC)
- Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"
- Snapdragon 820 Automotive Platform
- Snapdragon 835 Mobile PC Platform
- Snapdragon 845 Mobile Platform
- Snapdragon 850 Mobile Compute Platform
- Snapdragon 855 Mobile Platform
- Snapdragon 855+/860 Mobile Platform (SM8150-AC)
- Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"
- Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
- Snapdragon 8cx Compute Platform (SC8180X-AA, AB)
- Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"
- Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"
- Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)
- Snapdragon Auto 4G Modem
- Snapdragon Auto 5G Modem-RF
- Snapdragon W5+ Gen 1 Wearable Platform
- Snapdragon X5 LTE Modem
- Snapdragon X50 5G Modem-RF System
- Snapdragon X55 5G Modem-RF System
- Snapdragon XR1 Platform
- Vision Intelligence 300 Platform
- Vision Intelligence 400 Platform
- WCD9326
- WCD9335
- WCD9340
- WCD9341
- WCD9360
- WCD9370
- WCD9371
- WCD9375
- WCD9380
- WCD9385
- WCN3910
- WCN3950
- WCN3980
- WCN3988
- WCN3990
- WCN3999
- WSA8810
- WSA8815
- WSA8830
- WSA8832
- WSA8835

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Qualcomm, Inc.	Snapdragon	unaffected	Affected AQT1000 AR8031 AR9380 CSR8811 CSRA6620 CSRA6640 CSRB31024 FastConnect 6200 FastConnect 6700 FastConnect 6800 FastConnect 6900 Home Hub 100 Platform IPQ4018 IPQ4019 IPQ4028 IPQ4029 IPQ5010 IPQ5028 IPQ6000 IPQ6005 IPQ6010 IPQ6018 IPQ6028 IPQ8064 IPQ8065 IPQ8068 IPQ8069 IPQ8070 IPQ8070A IPQ8071 IPQ8071A IPQ8072 IPQ8072A IPQ8074 IPQ8074A IPQ8076 IPQ8076A IPQ8078 IPQ8078A IPQ8173 IPQ8174 Immersive Home 214 Platform Immersive Home 216 Platform Immersive Home 316 Platform Immersive Home 318 Platform MDM9250 MDM9628 MDM9640 MDM9650 MSM8996AU QAM8295P QCA4024 QCA6174A QCA6175A QCA6310 QCA6320 QCA6335 QCA6391 QCA6420 QCA6428 QCA6430 QCA6438 QCA6554A QCA6564 QCA6564A QCA6564AU QCA6574 QCA6574A QCA6574AU QCA6584AU QCA6595 QCA6595AU QCA6696 QCA6698AQ QCA7500 QCA8075 QCA8081 QCA9377 QCA9531 QCA9558 QCA9561 QCA9880 QCA9882 QCA9886 QCA9887 QCA9888 QCA9889 QCA9898 QCA9980 QCA9982 QCA9984 QCA9985 QCA9986 QCA9987 QCA9990 QCA9992 QCA9994 QCM2290 QCM4290 QCM4325 QCM4490 QCM6125 QCN5021 QCN5022 QCN5024 QCN5052 QCN5054 QCN5064 QCN5121 QCN5122 QCN5124 QCN5152 QCN5154 QCN5164 QCN5550 QCN6023 QCN6024 QCN6122 QCN6132 QCN7605 QCN7606 QCN9000 QCN9012 QCN9022 QCN9024 QCN9070 QCN9072 QCN9074 QCN9100 QCS2290 QCS410 QCS4290 QCS4490 QCS610 QCS6125 QFE1922 QFE1952 Robotics RB3 Platform SA4150P SA4155P SA6145P SA6150P SA6155 SA6155P SA8145P SA8150P SA8155 SA8155P SA8195P SA8295P SC8180X+SDX55 SD 455 SD 675 SD 8CX SD460 SD660 SD662 SD670 SD675 SD730 SD835 SD855 SDX20M SDX55 SG4150P SM4125 SM4450 SM6250 SM6250P SM7250P SW5100 SW5100P SXR1120 Smart Audio 400 Platform Snapdragon 4 Gen 1 Mobile Platform Snapdragon 460 Mobile Platform Snapdragon 480 5G Mobile Platform Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Snapdragon 630 Mobile Platform Snapdragon 636 Mobile Platform Snapdragon 660 Mobile Platform Snapdragon 662 Mobile Platform Snapdragon 665 Mobile Platform Snapdragon 670 Mobile Platform Snapdragon 675 Mobile Platform Snapdragon 678 Mobile Platform (SM6150-AC) Snapdragon 680 4G Mobile Platform Snapdragon 685 4G Mobile Platform (SM6225-AD) Snapdragon 690 5G Mobile Platform Snapdragon 695 5G Mobile Platform Snapdragon 710 Mobile Platform Snapdragon 712 Mobile Platform Snapdragon 720G Mobile Platform Snapdragon 730 Mobile Platform (SM7150-AA) Snapdragon 730G Mobile Platform (SM7150-AB) Snapdragon 732G Mobile Platform (SM7150-AC) Snapdragon 750G 5G Mobile Platform Snapdragon 765 5G Mobile Platform (SM7250-AA) Snapdragon 765G 5G Mobile Platform (SM7250-AB) Snapdragon 768G 5G Mobile Platform (SM7250-AC) Snapdragon 7c Compute Platform (SC7180-AC) Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro" Snapdragon 820 Automotive Platform Snapdragon 835 Mobile PC Platform Snapdragon 845 Mobile Platform Snapdragon 850 Mobile Compute Platform Snapdragon 855 Mobile Platform Snapdragon 855+/860 Mobile Platform (SM8150-AC) Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite" Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" Snapdragon 8cx Compute Platform (SC8180X-AA, AB) Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro" Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro" Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB) Snapdragon Auto 4G Modem Snapdragon Auto 5G Modem-RF Snapdragon W5+ Gen 1 Wearable Platform Snapdragon X5 LTE Modem Snapdragon X50 5G Modem-RF System Snapdragon X55 5G Modem-RF System Snapdragon XR1 Platform Vision Intelligence 300 Platform Vision Intelligence 400 Platform WCD9326 WCD9335 WCD9340 WCD9341 WCD9360 WCD9370 WCD9371 WCD9375 WCD9380 WCD9385 WCN3910 WCN3950 WCN3980 WCN3988 WCN3990 WCN3999 WSA8810 WSA8815 WSA8830 WSA8832 WSA8835

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-787

Out-of-bounds Write

CWE-823

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32234
Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32234		Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published Sep 5, 2023

Updated Feb 27, 2025

Reserved Mar 17, 2023

Link CVE-2023-28564

CISA Vulnrichment

Updated Feb 26, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-28564

Red Hat

No data

ENISA EUVD

Assigner qualcomm

Published Sep 5, 2023

Updated Feb 27, 2025

Link EUVD-2023-32234

GitHub

No data