CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-28581
Critical (9.8) in qualcomm. EPSS 0.5% chance of exploitation in the next 30 days.
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6800_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6436_firmware
- qualcomm:sd865_5g_firmware
- qualcomm:sd_8_gen1_5g_firmware
- qualcomm:snapdragon_865\+_5g_firmware
- qualcomm:snapdragon_865_5g_firmware
- qualcomm:snapdragon_870_5g_firmware
- qualcomm:snapdragon_8_gen_1_firmware
- qualcomm:snapdragon_ar2_gen_1_firmware
- qualcomm:snapdragon_xr2_5g_firmware
- qualcomm:ssg2115p_firmware
- qualcomm:ssg2125p_firmware
- qualcomm:sxr1230p_firmware
- qualcomm:sxr2230p_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcn6740_firmware
- qualcomm:wsa8810_firmware
- qualcomm:wsa8815_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8832_firmware
- qualcomm:wsa8835_firmware