NetSight
high7.8

CVE-2023-28551

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

Impact

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

Affected products

VendorProductAffected versions
Qualcomm315 5g Iot Modem Firmware
All versions
Qualcomm9205 Lte Modem Firmware
All versions
Qualcomm9206 Lte Modem Firmware
All versions
Qualcomm9207 Lte Modem Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8037 Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommC-V2x 9150 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions
QualcommCsrb31024 Firmware
All versions

Weakness classification

References