CVE-2023-33016 - Buffer Over-read in WLAN Firmware

Back Back to CVE browser

HIGH

Buffer Over-read in WLAN Firmware

Published Sep 5, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.38%

Description

Transient DOS in WLAN firmware while parsing MLO (multi-link operation).

Affected products

Vendor Qualcomm, Inc. Product Snapdragon Default
unaffected
- Version
  CSR8811
  Status
  affected
  Constraints
  -
- Version
  FastConnect 6900
  Status
  affected
  Constraints
  -
- Version
  FastConnect 7800
  Status
  affected
  Constraints
  -
- Version
  IPQ5010
  Status
  affected
  Constraints
  -
- Version
  IPQ5028
  Status
  affected
  Constraints
  -
- Version
  IPQ6000
  Status
  affected
  Constraints
  -
- Version
  IPQ6010
  Status
  affected
  Constraints
  -
- Version
  IPQ6018
  Status
  affected
  Constraints
  -
- Version
  IPQ6028
  Status
  affected
  Constraints
  -
- Version
  IPQ8070A
  Status
  affected
  Constraints
  -
- Version
  IPQ8071A
  Status
  affected
  Constraints
  -
- Version
  IPQ8072A
  Status
  affected
  Constraints
  -
- Version
  IPQ8074A
  Status
  affected
  Constraints
  -
- Version
  IPQ8076
  Status
  affected
  Constraints
  -
- Version
  IPQ8076A
  Status
  affected
  Constraints
  -
- Version
  IPQ8078
  Status
  affected
  Constraints
  -
- Version
  IPQ8078A
  Status
  affected
  Constraints
  -
- Version
  IPQ8173
  Status
  affected
  Constraints
  -
- Version
  IPQ8174
  Status
  affected
  Constraints
  -
- Version
  IPQ9574
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 214 Platform
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 216 Platform
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 316 Platform
  Status
  affected
  Constraints
  -
- Version
  Immersive Home 318 Platform
  Status
  affected
  Constraints
  -
- Version
  QCA4024
  Status
  affected
  Constraints
  -
- Version
  QCA8075
  Status
  affected
  Constraints
  -
- Version
  QCA8081
  Status
  affected
  Constraints
  -
- Version
  QCA8082
  Status
  affected
  Constraints
  -
- Version
  QCA8084
  Status
  affected
  Constraints
  -
- Version
  QCA8085
  Status
  affected
  Constraints
  -
- Version
  QCA8386
  Status
  affected
  Constraints
  -
- Version
  QCA9888
  Status
  affected
  Constraints
  -
- Version
  QCA9889
  Status
  affected
  Constraints
  -
- Version
  QCN5022
  Status
  affected
  Constraints
  -
- Version
  QCN5024
  Status
  affected
  Constraints
  -
- Version
  QCN5052
  Status
  affected
  Constraints
  -
- Version
  QCN5122
  Status
  affected
  Constraints
  -
- Version
  QCN5124
  Status
  affected
  Constraints
  -
- Version
  QCN5152
  Status
  affected
  Constraints
  -
- Version
  QCN5154
  Status
  affected
  Constraints
  -
- Version
  QCN5164
  Status
  affected
  Constraints
  -
- Version
  QCN6023
  Status
  affected
  Constraints
  -
- Version
  QCN6024
  Status
  affected
  Constraints
  -
- Version
  QCN6122
  Status
  affected
  Constraints
  -
- Version
  QCN6132
  Status
  affected
  Constraints
  -
- Version
  QCN9000
  Status
  affected
  Constraints
  -
- Version
  QCN9022
  Status
  affected
  Constraints
  -
- Version
  QCN9024
  Status
  affected
  Constraints
  -
- Version
  QCN9070
  Status
  affected
  Constraints
  -
- Version
  QCN9072
  Status
  affected
  Constraints
  -
- Version
  QCN9074
  Status
  affected
  Constraints
  -
- Version
  QCN9100
  Status
  affected
  Constraints
  -
- Version
  QCN9274
  Status
  affected
  Constraints
  -
- Version
  QCS8550
  Status
  affected
  Constraints
  -
- Version
  SD 8 Gen1 5G
  Status
  affected
  Constraints
  -
- Version
  SSG2115P
  Status
  affected
  Constraints
  -
- Version
  SSG2125P
  Status
  affected
  Constraints
  -
- Version
  SXR1230P
  Status
  affected
  Constraints
  -
- Version
  SXR2230P
  Status
  affected
  Constraints
  -
- Version
  Snapdragon 8 Gen 1 Mobile Platform
  Status
  affected
  Constraints
  -
- Version
  Snapdragon AR2 Gen 1 Platform
  Status
  affected
  Constraints
  -
- Version
  WCD9380
  Status
  affected
  Constraints
  -
- Version
  WCD9385
  Status
  affected
  Constraints
  -
- Version
  WSA8830
  Status
  affected
  Constraints
  -
- Version
  WSA8832
  Status
  affected
  Constraints
  -
- Version
  WSA8835
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
CSR8811	affected	-
FastConnect 6900	affected	-
FastConnect 7800	affected	-
IPQ5010	affected	-
IPQ5028	affected	-
IPQ6000	affected	-
IPQ6010	affected	-
IPQ6018	affected	-
IPQ6028	affected	-
IPQ8070A	affected	-
IPQ8071A	affected	-
IPQ8072A	affected	-
IPQ8074A	affected	-
IPQ8076	affected	-
IPQ8076A	affected	-
IPQ8078	affected	-
IPQ8078A	affected	-
IPQ8173	affected	-
IPQ8174	affected	-
IPQ9574	affected	-
Immersive Home 214 Platform	affected	-
Immersive Home 216 Platform	affected	-
Immersive Home 316 Platform	affected	-
Immersive Home 318 Platform	affected	-
QCA4024	affected	-
QCA8075	affected	-
QCA8081	affected	-
QCA8082	affected	-
QCA8084	affected	-
QCA8085	affected	-
QCA8386	affected	-
QCA9888	affected	-
QCA9889	affected	-
QCN5022	affected	-
QCN5024	affected	-
QCN5052	affected	-
QCN5122	affected	-
QCN5124	affected	-
QCN5152	affected	-
QCN5154	affected	-
QCN5164	affected	-
QCN6023	affected	-
QCN6024	affected	-
QCN6122	affected	-
QCN6132	affected	-
QCN9000	affected	-
QCN9022	affected	-
QCN9024	affected	-
QCN9070	affected	-
QCN9072	affected	-
QCN9074	affected	-
QCN9100	affected	-
QCN9274	affected	-
QCS8550	affected	-
SD 8 Gen1 5G	affected	-
SSG2115P	affected	-
SSG2125P	affected	-
SXR1230P	affected	-
SXR2230P	affected	-
Snapdragon 8 Gen 1 Mobile Platform	affected	-
Snapdragon AR2 Gen 1 Platform	affected	-
WCD9380	affected	-
WCD9385	affected	-
WSA8830	affected	-
WSA8832	affected	-
WSA8835	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-126

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37205
Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37205		Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin		Vendor Advisory