CVE-2023-28543

🗓️ 05 Sep 2023 06:29:28Reported by qualcommType

A malformed DLC triggers Memory Corruption in SNPE library due to out of bounds rea

Reporter	Title	Published	Views	Family All 8
CNNVD	Qualcomm Chipsets Buffer Error Vulnerability	5 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-28543 Out of Bounds read in SNPE Library	5 Sep 202306:29	–	cvelist
EUVD	EUVD-2023-32213	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28543	5 Sep 202307:15	–	nvd
Prion	Design/Logic Flaw	5 Sep 202307:15	–	prion
Positive Technologies	PT-2023-21791 · Unknown · Sane Library	4 Sep 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28543	23 May 202506:02	–	redhatcve
Vulnrichment	CVE-2023-28543 Out of Bounds read in SNPE Library	5 Sep 202306:29	–	vulnrichment

NVD

Node

qualcomm sd855_firmwareMatch-

AND

qualcomm sd855Match-

Node

qualcomm sd845_firmwareMatch-

AND

qualcomm sd845Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Compute",
      "Snapdragon Mobile",
      "Snapdragon Voice & Music"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "SD855"
      },
      {
        "status": "affected",
        "version": "SD845"
      },
      {
        "status": "affected",
        "version": "QCS605"
      },
      {
        "status": "affected",
        "version": "QCS405"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

21 Nov 2024 07:55Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.1 - 9.8

EPSS0.0013

SSVC

CWE-125