← CVE Intelligence

CVE-2023-28579

Buffer Copy Without Checking Size of Input in WLAN Host PUBLISHED

Description (CNA)

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Affected (CNA)

Vendor / productVersions
Qualcomm, Inc. / Snapdragonaffected FastConnect 6900; affected FastConnect 7800; affected QAM8295P; affected QCA6391; affected QCA6574AU; affected QCA6595AU; affected QCA6696; affected QCS410; affected QCS610; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8295P; affected Snapdragon 8 Gen 1 Mobile Platform; affected SW5100; affected SW5100P; affected WCD9341; affected WCD9370; affected WCD9380; affected WCN3660B; affected WCN3680B; affected WCN3950; affected WCN3980; affected WCN3988; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

CWE

CWE-120

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.