Lucene search
QualcommCVELIST:CVE-2023-28561HistoryAug 08, 2023 - 9:15 a.m.
CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL
2023-08-0809:15:03
CWE-120
qualcomm
www.cve.org
4
cve-2023-28561
buffer copy
size checking
qesl
memory corruption
external device
firmware
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.001
Percentile
51.0%
Memory corruption in QESL while processing payload from external ESL device to firmware.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Industrial IOT"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "QCN7606"
}
]
}
]Related
nvd
nvd
CVE-2023-28561
2023-08-08 10:15:14
cve
cve
CVE-2023-28561
2023-08-08 10:15:14
prion
prion
Memory corruption
2023-08-08 10:15:00
vulnrichment
vulnrichment
CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL
2023-08-08 09:15:03
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.001
Percentile
51.0%
Related for CVELIST:CVE-2023-28561