CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake...

CVE-2023-28582

CVE-2023-28582 is a memory corruption vulnerability in Qualcomm Data Modem triggered during the DTLS handshake when verifying the hello-verify message. Root cause: a buffer copy without checking input size. By sending crafted DTLS messages over the network, a remote attacker could potentially exe...