ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-28575

—
CVSS 3.1
7.8 high
EPSS
<1%p2
Published
()
Modified
Description

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

Vendors
qualcomm
Products
aqt1000 firmware, c-v2x 9150 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware, qam8295p firmware, qca6391 firmware, qca6420 firmware, qca6426 firmware, qca6430 firmware, qca6436 firmware
Weakness
CWE-823, CWE-843
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.