CVE-2023-28580 - Buffer Copy Without Checking Size of Input in WLAN Host

Back Back to CVE browser

HIGH

Buffer Copy Without Checking Size of Input in WLAN Host

Published Dec 5, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.16%

Description

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
- Version
  AR8035
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6900
  Status
  affected
  Constraints
  -
- Version
  FastConnect 7800
  Status
  affected
  Constraints
  -
- Version
  QAM8295P
  Status
  affected
  Constraints
  -
- Version
  QCA6391
  Status
  affected
  Constraints
  -
- Version
  QCA6574AU
  Status
  affected
  Constraints
  -
- Version
  QCA6595AU
  Status
  affected
  Constraints
  -
- Version
  QCA6696
  Status
  affected
  Constraints
  -
- Version
  QCA8081
  Status
  affected
  Constraints
  -
- Version
  QCA8337
  Status
  affected
  Constraints
  -
- Version
  QCC710
  Status
  affected
  Constraints
  -
- Version
  QCN6224
  Status
  affected
  Constraints
  -
- Version
  QCN6274
  Status
  affected
  Constraints
  -
- Version
  QCS410
  Status
  affected
  Constraints
  -
- Version
  QCS610
  Status
  affected
  Constraints
  -
- Version
  QFW7114
  Status
  affected
  Constraints
  -
- Version
  QFW7124
  Status
  affected
  Constraints
  -
- Version
  Qualcomm Video Collaboration VC1 Platform
  Status
  affected
  Constraints
  -
- Version
  Qualcomm Video Collaboration VC3 Platform
  Status
  affected
  Constraints
  -
- Version
  SA6145P
  Status
  affected
  Constraints
  -
- Version
  SA6150P
  Status
  affected
  Constraints
  -
- Version
  SA6155P
  Status
  affected
  Constraints
  -
- Version
  SA8145P
  Status
  affected
  Constraints
  -
- Version
  SA8150P
  Status
  affected
  Constraints
  -
- Version
  SA8155P
  Status
  affected
  Constraints
  -
- Version
  SA8195P
  Status
  affected
  Constraints
  -
- Version
  SA8295P
  Status
  affected
  Constraints
  -
- Version
  SW5100
  Status
  affected
  Constraints
  -
- Version
  SW5100P
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 8 Gen 1 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon X75 5G Modem-RF System
  Status
  affected
  Constraints
  -
- Version
  WCD9340
  Status
  affected
  Constraints
  -
- Version
  WCD9341
  Status
  affected
  Constraints
  -
- Version
  WCD9370
  Status
  affected
  Constraints
  -
- Version
  WCD9380
  Status
  affected
  Constraints
  -
- Version
  WCN3660B
  Status
  affected
  Constraints
  -
- Version
  WCN3680B
  Status
  affected
  Constraints
  -
- Version
  WCN3950
  Status
  affected
  Constraints
  -
- Version
  WCN3980
  Status
  affected
  Constraints
  -
- Version
  WCN3988
  Status
  affected
  Constraints
  -
- Version
  WSA8810
  Status
  affected
  Constraints
  -
- Version
  WSA8815
  Status
  affected
  Constraints
  -
- Version
  WSA8830
  Status
  affected
  Constraints
  -
- Version
  WSA8835
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
AR8035	affected	-
FastConnect 6900	affected	-
FastConnect 7800	affected	-
QAM8295P	affected	-
QCA6391	affected	-
QCA6574AU	affected	-
QCA6595AU	affected	-
QCA6696	affected	-
QCA8081	affected	-
QCA8337	affected	-
QCC710	affected	-
QCN6224	affected	-
QCN6274	affected	-
QCS410	affected	-
QCS610	affected	-
QFW7114	affected	-
QFW7124	affected	-
Qualcomm Video Collaboration VC1 Platform	affected	-
Qualcomm Video Collaboration VC3 Platform	affected	-
SA6145P	affected	-
SA6150P	affected	-
SA6155P	affected	-
SA8145P	affected	-
SA8150P	affected	-
SA8155P	affected	-
SA8195P	affected	-
SA8295P	affected	-
SW5100	affected	-
SW5100P	affected	-
Snapdragon 8 Gen 1 Mobile Platform	affected	-
Snapdragon X75 5G Modem-RF System	affected	-
WCD9340	affected	-
WCD9341	affected	-
WCD9370	affected	-
WCD9380	affected	-
WCN3660B	affected	-
WCN3680B	affected	-
WCN3950	affected	-
WCN3980	affected	-
WCN3988	affected	-
WSA8810	affected	-
WSA8815	affected	-
WSA8830	affected	-
WSA8835	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32250
Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
PatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32250		Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin		PatchVendor Advisory