CVE-2023-28581

CVE-2023-28581 involves memory corruption in Qualcomm WLAN firmware (FastConnect 6800) when parsing received GTK keys (GTK KDE). The issue affects the WLAN firmware path (closed‑source component) and is described as potentially critical, with in‑the‑wild exploitation details not provided in the c...

CVE-2023-28581 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE...

CVE-2023-28573

CVE-2023-28573 : Memory corruption in the WLAN HAL while parsing WMI command parameters. Affected software: Qualcomm WLAN HAL/Qualcomm components (Qualcomm closed‑source). Root cause: memory corruption within WLAN HAL during WMI parameter parsing. Impact: high, with local attack vector and impact...

CVE-2023-28573 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while parsing WMI command parameters...

CVE-2023-28567 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command through WMI interfaces...

CVE-2023-28567 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command through WMI interfaces...

CVE-2023-28567

CVE-2023-28567 corresponds to a memory corruption issue in the WLAN HAL when handling commands via WMI interfaces. Affected software is Qualcomm WLAN/closed‑source components; CVSSv3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges, and no user interaction. The connected records c...

CVE-2023-28565 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces...

CVE-2023-28565 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces...

CVE-2023-28565

CVE-2023-28565 affects Qualcomm WLAN HAL (Qualcomm chipsets) through WMI command streams. Root cause according to enrichment: improper validation of an array index leading to memory corruption in WLAN HAL. The issue is described in multiple sources (e.g., Qualcomm/Red Hat advisories; vuln enrichm...

CVE-2023-28564 Use of Out-of-range Pointer Offset in WLAN HAL

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...

CVE-2023-28564

CVE-2023-28564 is a memory-corruption vulnerability in the WLAN HAL when passing command parameters through WMI interfaces. Documented as high-severity (CVSS v3.1: 7.8; LOCAL, LOW privileges required, no user interaction) with potential impact on confidentiality, integrity, and availability. Publ...

CVE-2023-28564 Use of Out-of-range Pointer Offset in WLAN HAL

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...

CVE-2023-28560 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload...

CVE-2023-28560 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload...

CVE-2023-28560

Summary (CVE-2023-28560): Memory corruption in the WLAN HAL of Qualcomm chipsets triggered while processing the devIndex from an untrusted WMI payload. This affects WLAN HAL code paths and can impact confidentiality, integrity, and availability as indicated by the CVSS vector (Local access, Low c...

CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...

CVE-2023-28559

CVE-2023-28559: Memory corruption in WLAN firmware when processing command parameters from untrusted WMI payload. Affected: Qualcomm WLAN FW components (WLAN HAL). Root cause evidenced by multiple sources describing a WLAN firmware memory corruption issue; CVSS v3.1 base score 7.8 (High) with LOC...

CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...

CVE-2023-28558

CVE-2023-28558 reports memory corruption in the WLAN HAL when processing PhyID in the Tx status path, affecting Qualcomm closed-source components. The vulnerability has a high impact profile (C/H/I/A) with local attack vector, low attack complexity, and no user interaction required, according to ...