Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-28579 EUVD-2023-32249GHSA-5vhh-j7c8-8hjc

Buffer Copy Without Checking Size of Input in WLAN Host

Published Dec 5, 2023 · Updated Oct 10, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6900, FastConnect 7800, QAM8295P, QCA6391, QCA6574AU, QCA6595AU, QCA6696, QCS410, QCS610, Qualcomm Video Collaboration VC1 Platform, Qualcomm Video Collaboration VC3 Platform, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155P, SA8195P, SA8295P, Snapdragon 8 Gen 1 Mobile Platform, SW5… —

Advisories 1

References