CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-28551
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:315_5g_iot_modem_firmware
- qualcomm:9205_lte_modem_firmware
- qualcomm:9206_lte_modem_firmware
- qualcomm:9207_lte_modem_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8037_firmware
- qualcomm:aqt1000_firmware
- qualcomm:ar8035_firmware
- qualcomm:c-v2x_9150_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:csrb31024_firmware
- qualcomm:fastconnect_6200_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6800_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:fsm10055_firmware
- qualcomm:mdm8207_firmware
- qualcomm:mdm9205s_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9628_firmware
- qualcomm:mdm9640_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca4004_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6335_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware