Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28582 EUVD-2023-32252GHSA-v532-947m-m96r

Buffer Copy Without Checking Size of Input in Data Modem

Published Mar 4, 2024 · Updated Aug 26, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, FastConnect 6700, FastConnect 6900, FastConnect 7800, QCA6584AU, QCA6698AQ, QCA8081, QCA8337, QCC710, QCM4490, QCM8550, QCN6024, QCN6224, QCN6274, QCN9024, QCS4490, QFW7114, QFW7124, SM8550P, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8 Gen 3 Mobile P… —

Advisories 1

References