ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-28551

—
CVSS 3.1
7.8 high
EPSS
<1%p2
Published
()
Modified
Description

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

Vendors
qualcomm
Products
315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware, 9207 lte modem firmware, apq8017 firmware, apq8037 firmware, aqt1000 firmware, ar8035 firmware, c-v2x 9150 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware
Weakness
CWE-119, CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.