CVE-2023-28543 — Out of Bounds read in SNPE Library

CVE-2023-28543

Out of Bounds read in SNPE Library PUBLISHED

Description (CNA)

A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected SD855; affected SD845; affected QCS605; affected QCS405

CWE

CWE-125

References

https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

ADP enrichment

CVE

No English description supplied.

https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

CISA-ADP

No English description supplied.

No references supplied.