Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28562 EUVD-2023-32232GHSA-wjq7-rmcv-8f9w

Buffer Copy Without Checking Size of Input in QESL

Published Sep 5, 2023 · Updated Feb 27, 2025 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while handling payloads from remote ESL.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, FastConnect 6200, FastConnect 6800, QCA6391, QCA6420, QCA6430, QCN7606, QCS410, QCS610, SC8180X+SDX55, SD460, SD662, SD730, SD855, SDX55, SM4125, SM6250, SM6250P, SM7250P, Snapdragon 460 Mobile Platform, Snapdragon 480 5G Mobile Platform, Snapdragon 480+ 5G Mobile Platform (SM4350-AC), Sna… —

References