CVSS 3.1
7.1 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NCVE-2023-21652
High (7.1) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-798, CWE-320
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:aqt1000_firmware
- qualcomm:ar8035_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:qam8295p_firmware
- qualcomm:qca6390_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca8081_firmware
- qualcomm:qca8337_firmware
- qualcomm:qcc5100_firmware
- qualcomm:qcm2290_firmware
- qualcomm:qcm4290_firmware
- qualcomm:qcm6125_firmware
- qualcomm:qcm6490_firmware
- qualcomm:qcn6024_firmware
- qualcomm:qcn7606_firmware
- qualcomm:qcn9024_firmware
- qualcomm:qcs2290_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs4290_firmware
- qualcomm:qcs6125_firmware
- qualcomm:qcs6490_firmware
- qualcomm:qsm8350_firmware
- qualcomm:sa4150p_firmware
- qualcomm:sa6145p_firmware
- qualcomm:sa6150p_firmware
- qualcomm:sa6155_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa8145p_firmware
- qualcomm:sa8150p_firmware
- qualcomm:sa8155_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sa8195p_firmware
- qualcomm:sa8295p_firmware
- qualcomm:sa8540p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:sd460_firmware
- qualcomm:sd480_firmware